Security Advisory

CVE-2025-7906

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-20 19:32:05

Last updated 2025-07-21 15:52:37

Assigner VulDB

CVSS score not scored

State PUBLISHED

Description

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 and classified as critical. This issue affects the function uploadFile of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗