| शीर्षक | dromara RuoYi-Vue-Plus 5.4.0 Arbitrary File Read |
|---|
| विवरण | In the RuoYi-Vue-Plus project, The endpoints /demo/mail/sendMessageWithAttachment and /demo/mail/sendMessageWithAttachments in MailController.java can be accessed without authentication and allow attackers to specify arbitrary file paths as email attachments. This leads to an arbitrary file read vulnerability, enabling exfiltration of sensitive files from the server.
Project Link: https://github.com/dromara/RuoYi-Vue-Plus
Affected Version: 5.4.0
Affected API: /demo/mail/sendMessageWithAttachment and /demo/mail/sendMessageWithAttachments
Code Location: /src/main/java/org/dromara/demo/controller/MailController.java |
|---|
| स्रोत | ⚠️ https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250620-01/report.md |
|---|
| उपयोगकर्ता | ShenxiuSecurity (UID 84374) |
|---|
| सबमिशन | 20/06/2025 03:57 AM (1 वर्ष पहले) |
|---|
| संयम | 30/06/2025 03:17 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 314437 [Dromara RuoYi-Vue-Plus 5.4.0 Mail MailController.java filePath निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|