Skip to contentYunaiv Ruoyi-vue-pro vulnerabilities
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authenticationCVE-2026-1160076.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authenticationCVE-2026-1160066.9 Medium
- yunaiv ruoyi-vue-proruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrlCVE-2026-1106105.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirectCVE-2026-973255.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorizationCVE-2026-973246.9 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversalCVE-2026-973235.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scriptingCVE-2026-973225.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injectionCVE-2026-973215.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgeryCVE-2026-973205.3 Medium
- yunai ruoyi-vue-proruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderControllerCVE-2026-579508.6 High
- yunai ruoyi-vue-proruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET EndpointCVE-2026-579497.1 High
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversalCVE-2026-135286.9 Medium
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorizationCVE-2025-109885.3 Medium
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorizationCVE-2025-102785.3 Medium
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorizationCVE-2025-102765.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversalCVE-2025-27445.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversalCVE-2025-27435.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversalCVE-2025-27425.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Backend File Upload upload path traversalCVE-2025-27085.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Front-End Store upload path traversalCVE-2025-27075.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro deploy special elements used in a template engineCVE-2025-20405.3 Medium