CVE-2026-129247
MEDIUM
NVD
CVSS Score
4.7
Severity
MEDIUM
Published
Nov 14, 2026
Vendor
unknown
Description
A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.3. Impacted is the function VelocityUtils.getFileName of the file VelocityUtils.java of the component Code Generator. Performing a manipulation of the argument className results in path traversal. The attack is possible to be carried out remotely.