CVE-2023-27025 RuoYi vulnerable to arbitrary file download
Attackers can download arbitrary files from the server via the background management module, exposing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-27025?
CVE-2023-27025 is a high-severity path traversal vulnerability in Ruoyi Ruoyi, published on 2 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
Weakness: CWE-494
Which versions are affected by CVE-2023-27025?
2 open source packages ship an affected version, including com.ruoyi:ruoyi. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.ruoyi:ruoyi Maven | All versions | 4.7.7 |
com.ruoyi:ruoyi Maven | All versions | 4.7.7 |
Products include Ruoyi Ruoyi.
How do I fix CVE-2023-27025?
Upgrade com.ruoyi:ruoyi to 4.7.7 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-27025 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-27025 exists.
Other vulnerabilities in Ruoyi Ruoyi
Sources
Also known as GHSA-h4c9-rr5m-32fm.