Threats tagged 'ghsa-228m-p28v-qwvj'

A server-side request forgery (SSRF) vulnerability exists in the AiKnowledgeDocumentServiceImpl.readUrl function of the AI Knowledge Module in YunaiV/zhijiantianya ruoyi-vue-pro up to version 2026.08. This flaw allows remote attackers to manipulate the url argument, potentially causing unauthorized server-side requests. An exploit has been published, but no vendor response or patch is currently available.