GHSA-p4ww-j4pr-qw6q
RuoYi vulnerable to Cross-site Scripting
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.ruoyi:ruoyi | <= 4.7.7 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function `uploadFilesPath` of the component `File Upload`. The manipulation of the argument `originalFilenames` leads to cross site scripting. The attack may be launched remotely. VDB-235118 is the identifier assigned to this vulnerability.
References
External links from the advisory. They lead to third-party sites.