CVE-2023-27025: High severity ruoyi ruoyi-cloud vulnerability
Published Apr 2, 2023
·Updated
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
Affected Software
2 affected componentsFixes available
Ruoyi Ruoyi<=4.7.6
maven/com.ruoyi:ruoyi<4.7.7
4.7.7
Event History
Apr 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:30 AM
Data Sourced
via GitHub·03:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this arbitrary file download vulnerability?
The vulnerability ID is CVE-2023-27025.
2
What is the affected software version of this vulnerability?
The affected software version is RuoYi v4.7.6 and below.
3
What is the severity rating of CVE-2023-27025?
The severity rating of CVE-2023-27025 is high, with a score of 7.5.
4
How can an attacker exploit this vulnerability?
Attackers can exploit this vulnerability to download arbitrary files on the server.
5
Are there any references related to this vulnerability?
Yes, you can find more information about this vulnerability in the references: [Reference 1](https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0), [Reference 2](https://gitee.com/y_project/RuoYi/issues/I697Q5).