{"action":"Upgrade com.ruoyi:ruoyi to 4.7.7 or later.","affected":[{"fixed":"4.7.7","introduced":"0"}],"component":"com.ruoyi:ruoyi","cve_ids":["CVE-2023-27025"],"ecosystem":"Maven","epss":0.00337,"exploited":false,"fixed_versions":["4.7.7"],"ghsa_id":"GHSA-h4c9-rr5m-32fm","id":"tcs_01M5N8ZKZGXQMNT2JJRX3J86BZ","modified_at":"2025-07-16T19:24:22Z","published_at":"2023-04-02T03:30:16Z","references":["https://osv.dev/vulnerability/GHSA-h4c9-rr5m-32fm","https://nvd.nist.gov/vuln/detail/CVE-2023-27025","https://gitee.com/y_project/RuoYi","https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0","https://gitee.com/y_project/RuoYi/issues/I697Q5"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h4c9-rr5m-32fm","url":"https://osv.dev/vulnerability/GHSA-h4c9-rr5m-32fm"}],"summary":"RuoYi vulnerable to arbitrary file download"}