Volerion logoVolerion
Volerion logoVolerion

Zhijiantianya Ruoyi-Vue-Pro Path Traversal Vulnerability in Front-End Store Interface

Vulnerability

A critical path traversal vulnerability has been identified in Zhijiantianya Ruoyi-Vue-Pro version 2.4.1. The issue arises in the Front-End Store Interface, specifically within the file upload functionality of the app-api/infra/file endpoint. The vulnerability allows for manipulation of the path argument, potentially leading to unauthorized access to files. This issue can be exploited remotely.

Impact

Exploitation of this vulnerability allows for path traversal, which could lead to unauthorized file access on the server.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
3.3
exploitability
6.6
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.