References https://nvd.nist.gov/vuln/detail/CVE-2025-3202 https://cve.imfht.com/detail/CVE-2025-3202?lang=en https://vuldb.com/vuln/303156 https://cvefeed.io/vuln/detail/CVE-2025-3202 https://www.linkedin.com/posts/vulns-space_cve20253202-ruoyi-cve-activity-7313773420939284480-Y8uM https://cve.imfht.com/intel/384160?lang=en https://www.cisa.gov/news-events/bulletins/sb25-097
Related VulnerabilitiesRuoYi AI /prod-api/system/model/list 信息泄露漏洞(CVE-2025-3199)(CVE-2025-7901)RuoYi Swagger UI组件configUrl参数跨站脚本漏洞PoCCNVD-2021-01931: Ruoyi Management System - Local File InclusionPoCruoyi-druid-unauth: 若依管理系统未授权访问RuoYi-Vue-Plus sendMessageWithAttachment 任意文件读取漏洞RuoYi AI /prod-api/auth/login 默认口令漏洞ruoyi-vue-pro 路径遍历漏洞若依-RuoYi-Vue getUsersByPhone 未授权访问漏洞若依RuoYi druid组件弱口令漏洞