CVE-2025-28408 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} endpoint does not proper…
Critical CVSS: 9.8

CVE-2025-28408

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} endpoint does not properly validate the deptId parameter
Vendor
Ruoyi
Product
Ruoyi
CWE
CWE-284
Yayın Tarihi
2025-04-07 16:15:24
Güncelleme
2025-04-09 19:00:22
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-284 Ruoyi CRITICAL Ruoyi 2025

Referanslar

https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md https://github.com/yangzongzhuan/RuoYi https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md