Volerion logoVolerion
Volerion logoVolerion

yangzongzhuan RuoYi-Vue Unrestricted File Upload Vulnerability in Common Upload Endpoint

Vulnerability

A vulnerability allowing unrestricted file uploads has been identified in yangzongzhuan RuoYi-Vue versions through 3.9.2. The issue arises in the FileUploadUtils.upload function within the Common Upload Endpoint. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, which could lead to various attacks depending on the uploaded file's nature, such as executing malicious scripts or overwriting existing files.

Added: May 26, 2026, 8:42 PM
Updated: May 26, 2026, 8:42 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
7.4
remediation
0.0
relevance
9.3
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.