Liuyulin

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** YunaiV/zhijiantianya ruoyi-vue-pro versions prior to 2026.09 **Description** A remote SQL injection issue exists in the GoView Data Endpoint. The flaw is located in the `getDataBySQL()` function within the `GoViewDataServiceImpl.java` file. An attacker can manipulate the `sql` argument to execute arbitrary SQL commands. **Recommendations** Update to a version newer than 2026.08. As a temporary workaround, restrict access to the `getDataBySQL()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ruoyi-vue-pro versions prior to 2026.09 **Description** A cross site scripting issue exists in the File Upload component within the file `yudao-module-infra/src/main/java/cn/iocoder/yudao/module/infra/controller/admin/file/FileController.java`. This flaw allows a remote attacker to perform a manipulation that executes malicious scripts in the context of a user's session. **Recommendations** Update ruoyi-vue-pro to a version newer than 2026.08. Restrict access to the `FileController.java` file within the File Upload component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ruoyi-vue-pro versions prior to 2026.09 **Description** A path traversal issue exists in the File Upload component. This occurs within the `getOriginalFilename()` function located in the `yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java` file. A remote attacker can manipulate the input to access or traverse directories outside the intended folder. **Recommendations** Update ruoyi-vue-pro to a version later than 2026.08. As a temporary workaround, restrict the use of the `getOriginalFilename()` function until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** YunaiV/zhijiantianya ruoyi-vue-pro versions prior to 2026.09 **Description** Improper authorization exists in the Demo-order Payment Callback Handler component. A remote attacker can manipulate the `ID` argument within the `updateDemoOrderPaid()` function of the `PayDemoOrderController.java` file to bypass authorization controls. **Recommendations** Update YunaiV/zhijiantianya ruoyi-vue-pro to a version later than 2026.08. As a temporary workaround, restrict access to the `updateDemoOrderPaid()` function until a patch is applied.

A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/service/oauth2/OAuth2ClientServiceImpl.java of the component OAuth2 Client. The manipulation of the argument redirect uri results in open redirect. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.