Skip to content
OpenAdvisories

Vendor

zhijiantianya

15 known vulnerabilities.

Products

ruoyi-vue-pro 15
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2026-116006 Scanner template

    YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication

    A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. The manipulation of the argument mobile/code results in impro…

    YunaiV zhijiantianya ruoyi-vue-pro ruoyi-vue-pro
  • High 7.3
    CVE-2026-97324

    YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization

    A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/demo/PayDemoOrderController.java of the co…

    YunaiV zhijiantianya ruoyi-vue-pro ruoyi-vue-pro
  • High 7.3
    CVE-2026-13528

    YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal

    A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPath of the file yudao-module-infra/src/main/java/cn/iocoder/yudao/module/infra/service/file/FileServiceImpl.java o…

    YunaiV zhijiantianya ruoyi-vue-pro ruoyi-vue-pro