CVE-2023-3815

A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched remotely. VDB-235118 is the identifier assigned to this vulnerability.

• CWE-79

• https://gitee.com/y_project/RuoYi/issues/I7IL85Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.235118Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.235118Permissions Required, Third Party Advisory, VDB Entry
• https://gitee.com/y_project/RuoYi/issues/I7IL85Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.235118Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.235118Permissions Required, Third Party Advisory, VDB Entry

Published

Jul 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38143Windows Common Log File System Driver Elevation of Privilege…7.8
• CVE-2023-38144Windows Common Log File System Driver Elevation of Privilege…7.8
• CVE-2023-38146Windows Themes Remote Code Execution Vulnerability8.8
• CVE-2023-38147Windows Miracast Wireless Display Remote Code Execution Vuln…8.8
• CVE-2023-38148Internet Connection Sharing (ICS) Remote Code Execution Vuln…8.8
• CVE-2023-38149Windows TCP/IP Denial of Service Vulnerability7.5
• CVE-2023-38150Windows Kernel Elevation of Privilege Vulnerability7.8
• CVE-2023-38151Microsoft Host Integration Server 2020 Remote Code Execution…8.8
• CVE-2023-38152DHCP Server Service Information Disclosure Vulnerability5.3
• CVE-2023-38154Windows Kernel Elevation of Privilege Vulnerability7.8
• CVE-2023-38155Azure DevOps Server Remote Code Execution Vulnerability8.1
• CVE-2023-38156Azure HDInsight Apache Ambari JDBC Injection Elevation of Pr…7.2