Medium severity6.3NVD Advisory· Published Mar 6, 2025· Updated Jun 17, 2026
CVE-2025-2040
CVE-2025-2040
Description
A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:iocoder:ruoyi-vue-pro:2.4.1:*:*:*:*:*:*:*
<2.4.1+ 1 more
- (no CPE)range: <2.4.1
- (no CPE)range: 2.4.1
Patches
Vulnerability mechanics
References
4- github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.