CVE-2024-41599

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2024-07-19

Last modified

2025-03-19

Weaknesses

CWE-79

Affected products

• Ruoyi (Ruoyi)

References

• https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41599