CVE-2026-13528

creationtimestamp| type| source ---|---|--- 2026-06-29 04:25:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfngpwbeg2t 2026-06-29 19:53:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphbbvhcub2d...

CVE-2026-13528 YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPath of the file yudao-module-infra/src/main/java/cn/iocoder/yudao/module/infra/service/file/FileServiceImpl.java of the component AppFileController File...