Zhijiantianya Ruoyi-Vue-Pro Path Traversal Vulnerability in Material Upload Interface
Vulnerability
A critical path traversal vulnerability has been identified in Zhijiantianya Ruoyi-Vue-Pro version 2.4.1. The issue arises in the Material Upload Interface, specifically within the file '/admin-api/mp/material/upload-news-image'. The vulnerability allows remote attackers to manipulate the 'file' argument, potentially leading to arbitrary file deletion.
Impact
Exploitation of this vulnerability allows for arbitrary file deletion on the server, affecting files accessible to the application.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.