Description
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.ruoyi:ruoyi | < 4.7.7 | 4.7.7 | GHSA-h4c9-rr5m-32fm |