CVE-2023-3815

Summary

CVE-2023-3815 is a recently identified vulnerability affecting y_project RuoYi versions up to 4.7.7. This issue lies in the File Upload component's uploadFilesPath function, where manipulation of the originalFilenames argument can result in cross-site scripting (XSS). An attacker can exploit this remotely, injecting malicious code into a victim's web browser, leading to potential data theft or unauthorized actions. (VDB-235118)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.