Skip to contentYangzongzhuan Ruoyi vulnerabilities
- yangzongzhuan ruoyiyangzongzhuan RuoYi Code Generator VelocityUtils.java VelocityUtils.getFileName path traversalCVE-2026-1292475.1 Medium
- yangzongzhuan ruoyi-vueyangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges managementCVE-2026-1220165.3 Medium
- yangzongzhuan ruoyiyangzongzhuan RuoYi authDataScope checkRoleAllowed privileges managementCVE-2026-1088255.3 Medium
- y project ruoyiy_project RuoYi Disable API add changeStatus session expirationCVE-2026-1088035.3 Medium
- y project ruoyiy_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scriptingCVE-2026-1088025.1 Medium
- yangzongzhuan ruoyiyangzongzhuan RuoYi cross-site request forgeryCVE-2026-1088005.3 Medium
- yangzongzhuan ruoyi-vueyangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversalCVE-2026-765765.3 Medium
- yangzongzhuan ruoyi-vueyangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted uploadCVE-2026-93745.3 Medium
- yangzongzhuan ruoyiyangzongzhuan RuoYi Quartz Job job code injectionCVE-2026-45645.1 Medium
- ruoyiy_project RuoYi getnames code injectionCVE-2025-148565.3 Medium
- ruoyiyangzongzhuan RuoYi selectAll improper authorizationCVE-2025-109895.3 Medium
- ruoyiyangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injectionCVE-2025-104735.3 Medium
- ruoyiyangzongzhuan RuoYi Role cancelAll improper authorizationCVE-2025-103845.3 Medium
- ruoyiyangzongzhuan RuoYi edit cross site scriptingCVE-2025-88475.1 Medium
- ruoyiyangzongzhuan RuoYi Druid application-druid.yml default credentialsCVE-2025-79075.3 Medium
- ruoyiyangzongzhuan RuoYi CommonController.java uploadFile unrestricted uploadCVE-2025-79065.3 Medium
- ruoyiyangzongzhuan RuoYi Image Source ui layerCVE-2025-79035.3 Medium
- ruoyiyangzongzhuan RuoYi SysNoticeController.java addSave cross site scriptingCVE-2025-79025.1 Medium
- ruoyiyangzongzhuan RuoYi Swagger UI index.html cross site scriptingCVE-2025-79015.3 Medium
- ruoyiy_project RuoYi Offline Logout batchForceLogout improper authorizationCVE-2025-48192.3 Low
- ruoyi ruoyi-vueyangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookieCVE-2025-45372.3 Low
- ruoyiy_project RuoYi Whitelist getBeanName deserializationCVE-2025-07345.1 Medium
- ruoyiy_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scriptingCVE-2024-90486.3 Medium
- ruoyiy_project RuoYi Content-Type isJsonRequest cross site scriptingCVE-2024-65115.3 Medium
- ruoyiy_project RuoYi HTTP POST Request login cross site scriptingCVE-2023-71334.3 Medium
- ruoyiy_project RuoYi File Upload uploadFilesPath cross site scriptingCVE-2023-38153.5 Low
- ruoyiy_project RuoYi filterKeyword resource consumptionCVE-2023-3163Public exploit3.5 Low
- ruoyiy_project RuoYi GenController sql injectionCVE-2022-45665.5 Medium