CVE-2025-28409 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether…
High CVSS: 8.8

CVE-2025-28409

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether the requesting user has permission to add a menu item under the specified parentId
Vendor
Ruoyi
Product
Ruoyi
CWE
CWE-284
Yayın Tarihi
2025-04-07 16:15:25
Güncelleme
2025-04-09 18:59:55
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-284 Ruoyi HIGH Ruoyi 2025

Referanslar

https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md https://github.com/yangzongzhuan/RuoYi https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md