Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-32065

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6w2f-6wq3-rjvf

RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

gitlab/maven/com.ruoyi/ruoyi/CVE-2022-32065

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.