An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
References:GSA_kwCzR0hTQS1oNGM5LXJyNW0tMzJmbc4AAyfx
RuoYi vulnerable to arbitrary file download
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:com.ruoyi:ruoyi | < 4.7.7 | 4.7.7 | |
|
|
|||