RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

보통 5.4CVE-2022-32065 · GHSA-6w2f-6wq3-rjvf · Published 13/07/2022 · updated 17/06/2026

요약

CVE-2022-32065은(는) com.ruoyi:ruoyi, ruoyi (ruoyi)에 영향을 주는 보통 (CVSS 5.4) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.97%, 전체 취약점의 61.8%보다 높음.
조치: 4.7.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
com.ruoyi:ruoyi Maven	`< 4.7.4`	`4.7.4`
ruoyi ruoyi	`≤ 4.7.3`	No fix yet

Description

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

NVD description

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

References

nvd.nist.gov/vuln/detail/CVE-2022-32065 · ADVISORY
yangzongzhuan/RuoYi · WEB
yangzongzhuan/RuoYi commit d8b2a9a · WEB
gitee.com/y_project/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6 · WEB
gitee.com/y_project/RuoYi/issues/I57IME · WEB
yangzongzhuan/RuoYi · WEB

com.ruoyi:ruoyi의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

com.ruoyi:ruoyi

Maven

< 4.7.4

4.7.4

ruoyi

≤ 4.7.3

No fix yet

Description

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

NVD description

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

com.ruoyi:ruoyi의 다른 취약점

모두 보기 →