zhijiantianya

Products

ProductCVEsExploitedLatest
ruoyi-vue-pro15–Oct 25, 2026

Exploited and recent CVEs

  • CVE-2026-116007 Low 3.7 YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication 0.4%
  • CVE-2026-116006 High 7.3 YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication 0.8%
  • CVE-2026-97325 Medium 4.3 YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect 0.3%
  • CVE-2026-97324 High 7.3 YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization 0.3%
  • CVE-2026-97323 Medium 6.3 YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal 0.4%
  • CVE-2026-97322 Medium 4.3 YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting 0.3%
  • CVE-2026-97321 Medium 6.3 YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection 0.2%
  • CVE-2026-97320 Medium 6.3 YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery 0.3%
  • CVE-2026-13528 High 7.3 YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal 0.6%
  • CVE-2025-2744 Medium 5.4 zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal 0.7%
  • CVE-2025-2743 Medium 4.3 zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal 0.9%
  • CVE-2025-2742 Medium 5.4 zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal 0.9%
  • CVE-2025-2708 Medium 5.4 zhijiantianya ruoyi-vue-pro Backend File Upload upload path traversal 0.7%
  • CVE-2025-2707 Medium 5.4 zhijiantianya ruoyi-vue-pro Front-End Store upload path traversal 0.7%
  • CVE-2025-2040 Medium 6.3 zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine 0.5%