Medium severity5.4NVD Advisory· Published Jul 13, 2022· Updated Jun 17, 2026

CVE-2022-32065

Description

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.ruoyi:ruoyiMaven	< 4.7.4	4.7.4

Affected products

Ruoyi/Ruoyi2 versions
cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*range: <=4.7.3
- (no CPE)
ghsa-coords
pkg:maven/com.ruoyi/ruoyi
Range: < 4.7.4

Patches

Vulnerability mechanics

References

github.com/yangzongzhuan/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6nvdPatchThird Party AdvisoryWEB
gitee.com/y_project/RuoYi/issues/I57IMEnvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/yangzongzhuan/RuoYi/issues/118nvdExploitIssue TrackingThird Party AdvisoryWEB
gitee.com/y_project/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6nvdProductThird Party AdvisoryWEB
github.com/advisories/GHSA-6w2f-6wq3-rjvfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-32065ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000