What’s Vulnerable › Products
zhijiantianya ruoyi-vue-pro vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.
Check whether your zhijiantianya ruoyi-vue-pro version is affected
Latest zhijiantianya ruoyi-vue-pro vulnerabilities
- CVE-2026-116007 — YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication (CVSS 3.7)
- CVE-2026-116006 — YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication (CVSS 7.3)
- CVE-2026-110610 — ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl (CVSS 5.4)
- CVE-2026-97325 — YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect (CVSS 4.3)
- CVE-2026-97323 — YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal (CVSS 6.3)
- CVE-2026-97322 — YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting (CVSS 4.3)
- CVE-2026-97321 — YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection (CVSS 6.3)
- CVE-2026-97324 — YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization (CVSS 7.3)
- CVE-2026-97320 — YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery (CVSS 6.3)
- CVE-2026-13528 — YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal (CVSS 7.3)
- CVE-2025-10988 — YunaiV ruoyi-vue-pro transfer improper authorization (CVSS 8.8)
- CVE-2025-10278 — YunaiV ruoyi-vue-pro transfer improper authorization (CVSS 8.8)
- CVE-2025-10276 — YunaiV ruoyi-vue-pro transfer improper authorization (CVSS 8.8)
- CVE-2025-2744 — zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal (CVSS 5.4)
- CVE-2025-2743 — zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal (CVSS 8.1)
- CVE-2025-2742 — zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal (CVSS 8.1)
- CVE-2025-2708 — zhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversal (CVSS 9.1)
- CVE-2025-2707 — zhijiantianya ruoyi-vue-pro Front-End Store Interface upload path traversal (CVSS 9.1)
- CVE-2025-2040 — zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine (CVSS 6.3)
- CVE-2022-37158 — (CVSS 9.8)