CVE-2023-27025

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-494

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0Permissions Required
https://gitee.com/y_project/RuoYi/issues/I697Q5Exploit, Issue Tracking
https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0Permissions Required
https://gitee.com/y_project/RuoYi/issues/I697Q5Exploit, Issue Tracking

Timeline

Published: Apr 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-27037.5Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve CVE-2023-270329.8Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::CVE-2023-270339.8Prestashop cdesigner v3.1.3 to v3.1.8 was discovered to contain a code injection vulnerability via the component CdesignerSaverotateModuleFr CVE-2023-270349.8PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.CVE-2023-270357.5An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified CVE-2023-270378.8Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php CVE-2023-27049.8The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. This is due to insu CVE-2023-270409.8Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.CVE-2023-270419.8School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_use CVE-2023-270428.8Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg.CVE-2023-270435.3The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2 CVE-2023-27056.1The gAppointments WordPress plugin before 1.10.0 does not sanitise and escape a parameter before outputting it back in the page, leading to