CVE-2024-41599 - Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method

MEDIUM

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method

Published Jul 19, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.49%

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39094		Advisory
https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41599		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 19, 2024

Updated Mar 19, 2025

Reserved Jul 18, 2024

Updated Mar 19, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jul 19, 2024

Updated Mar 19, 2025

Exploited since n/a