[com.ruoyi:ruoyi] RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-32065
• https://github.com/yangzongzhuan/RuoYi/issues/118
• https://github.com/yangzongzhuan/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6
• https://gitee.com/y_project/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6
• https://gitee.com/y_project/RuoYi/issues/I57IME
• https://github.com/advisories/GHSA-6w2f-6wq3-rjvf