一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月25日

CVE-2026-97320 [MEDIUM] – A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected el

未分类
📑 文章目录

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.