CVE-2025-2743

Name of the Vulnerable Software and Affected Versions zhijiantianya ruoyi-vue-pro version 2.4.1

Description A problematic issue has been found in the Material Upload Interface component, affecting the processing of the file /admin-api/mp/material/upload-temporary. The manipulation of the File argument leads to path traversal. This issue can be exploited remotely.

Recommendations For zhijiantianya ruoyi-vue-pro version 2.4.1, as a temporary workaround, consider restricting access to the /admin-api/mp/material/upload-temporary endpoint to minimize the risk of exploitation. Avoid using the File argument in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.