Description
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.ruoyi:ruoyi | < 4.7.4 | 4.7.4 | GHSA-6w2f-6wq3-rjvf |