CVE-2025-2707
Medium
Description
A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/upload of the component Front-End Store Interface. This manipulation of the argument path causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 4ae3f6b2c9883978837638c14e3d18419819eeb0. It is recommended to apply a patch to fix this issue.
SeverityMedium
CVSS5.4
Exploit probability—
ProductIocoder Ruoyi-vue-pro
PublishedMar 24, 2025
First seenMar 24, 2025
Weakness typeCWE-22Path traversal
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iocoder ruoyi-vue-pro | 2.4.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.