Vulnerabilities in zhijiantianya
13 resultsVexday analysis
Zhijiantianya apresenta footprint reduzido com 7 CVEs catalogadas, nenhuma sob exploração ativa conhecida. A fraqueza predominante é path traversal (CWE-22), típica de controle inadequado de entrada, sem críticas de severidade máxima registradas. O risco permanece contido, embora uma publicação recente (últimos 90 dias) recomende monitoramento contínuo de novas divulgações.
CVE-2025-2707MEDIUMzhijiantianya ruoyi-vue-pro Front-End Store Interface upload path traversalEPSS 0.9%CVE-2025-2708MEDIUMzhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversalEPSS 0.9%CVE-2025-2742MEDIUMzhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversalEPSS 0.9%CVE-2025-2743MEDIUMzhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversalEPSS 0.9%CVE-2025-2744MEDIUMzhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversalEPSS 0.7%CVE-2026-13528MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversalEPSS 0.6%CVE-2025-2040MEDIUMzhijiantianya ruoyi-vue-pro deploy special elements used in a template engineEPSS 0.5%CVE-2026-97323MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversalEPSS 0.4%CVE-2026-97324MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorizationEPSS 0.3%CVE-2026-97322MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scriptingEPSS 0.3%CVE-2026-97325MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirectEPSS 0.3%CVE-2026-97321MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injectionEPSS 0.2%CVE-2026-97320MEDIUMYunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgeryEPSS 0.2%