Zhijiantianya vulnerabilities

Products

• Ruoyi-vue-pro 15

Newest

• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication CVE-2026-116007 6.3 MediumOctober 25, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication CVE-2026-116006 6.9 MediumOctober 25, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect CVE-2026-97325 5.3 MediumSeptember 24, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization CVE-2026-97324 6.9 MediumSeptember 24, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal CVE-2026-97323 5.3 MediumSeptember 24, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting CVE-2026-97322 5.3 MediumSeptember 24, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection CVE-2026-97321 5.3 MediumSeptember 24, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery CVE-2026-97320 5.3 MediumSeptember 24, 2026
• yunaiv ruoyi-vue-pro YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal CVE-2026-13528 6.9 MediumJune 29, 2026
• iocoder ruoyi-vue-pro zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal CVE-2025-2744 5.3 MediumMarch 25, 2025
• iocoder ruoyi-vue-pro zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal CVE-2025-2743 5.3 MediumMarch 25, 2025
• iocoder ruoyi-vue-pro zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal CVE-2025-2742 5.3 MediumMarch 25, 2025
• iocoder ruoyi-vue-pro zhijiantianya ruoyi-vue-pro Backend File Upload upload path traversal CVE-2025-2708 5.3 MediumMarch 24, 2025
• iocoder ruoyi-vue-pro zhijiantianya ruoyi-vue-pro Front-End Store upload path traversal CVE-2025-2707 5.3 MediumMarch 24, 2025
• iocoder ruoyi-vue-pro zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine CVE-2025-2040 5.3 MediumMarch 6, 2025