Approved changes feed: RSS · Atom
cpe:2.3:a:yangzongzhuan:ruoyi:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Yangzongzhuan (c950d6d2-53a3-50b8-8db2-1527be4b3716) |
|---|---|
| Product | Ruoyi (d4af65ea-c1b0-58ba-8396-1c9bb41a7e0b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8847 |
vulnerable | 2026-06-08 07:45:21.308021 |
yangzongzhuan RuoYi edit cross site scripting
LOW (3.5)
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is the function Edit of the file /system/notice/edit. The manipulation of the argument noticeTitle/noticeContent leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T13:02:06.785Z
Updated: 2025-08-12T13:42:58.718Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7907 |
vulnerable | 2026-06-08 07:45:18.485529 |
yangzongzhuan RuoYi Druid application-druid.yml default credentials
MEDIUM (4.3)
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src/main/resources/application-druid.yml of the component Druid. The manipulation leads to use of default credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T20:32:05.417Z
Updated: 2025-07-21T12:43:57.841Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7906 |
vulnerable | 2026-06-08 07:45:18.485043 |
yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload
MEDIUM (6.3)
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 and classified as critical. This issue affects the function uploadFile of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T19:32:05.216Z
Updated: 2025-07-21T15:52:37.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7903 |
vulnerable | 2026-06-08 07:45:18.480731 |
yangzongzhuan RuoYi Image Source ui layer
MEDIUM (4.3)
A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T16:32:05.647Z
Updated: 2025-07-21T16:05:13.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7902 |
vulnerable | 2026-06-08 07:45:18.480341 |
yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in yangzongzhuan RuoYi up to 4.8.1. Affected is the function addSave of the file com/ruoyi/web/controller/system/SysNoticeController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T16:02:05.625Z
Updated: 2025-07-21T18:38:28.183Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7901 |
vulnerable | 2026-06-08 07:45:18.478726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10989 |
vulnerable | 2026-06-08 07:02:27.888616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10473 |
vulnerable | 2026-06-08 07:02:26.932000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10384 |
vulnerable | 2026-06-08 07:02:26.775409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.