Vulnerability · Published Jun 30, 2025 · Assigned by VulDB

CVE-2025-6925Dromara RuoYi-Vue-Plus Mail MailController.java path traversal

Medium 5.3

In plain English

A medium-severity path traversal in RuoYi-Vue-Plus from Dromara. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)1.1%top 35.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /src/main/java/org/dromara/demo/controller/MailController.java of the component Mail Handler. The manipulation of the argument filePath leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Dromara	RuoYi-Vue-Plus	5.4.0

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

References

VDB-314437 | Dromara RuoYi-Vue-Plus Mail MailController.java path traversal vdb-entry, technical-description
VDB-314437 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #600948 | dromara RuoYi-Vue-Plus 5.4.0 Arbitrary File Read third-party-advisory
https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250620-01/report.md exploit
https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250620-01/report.md#steps-to-reproduce exploit