CVE-2025-28407 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether…
High CVSS: 8.8

CVE-2025-28407

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether the requesting user has permission to modify the specified dictId
Vendor
Ruoyi
Product
Ruoyi
CWE
CWE-284
Yayın Tarihi
2025-04-07 16:15:24
Güncelleme
2025-04-09 19:00:44
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-284 Ruoyi HIGH Ruoyi 2025

Referanslar

https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28407.md https://github.com/yangzongzhuan/RuoYi https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28407.md