CVE-2026-129247

A path traversal vulnerability exists in yangzongzhuan RuoYi (up to version 4.8.3 ). The flaw is located in the Code Generator component, specifically within the getFileName function of the VelocityUtils.java file. By manipulating the className argument, a remote attacker can perform a path trave...