CVE-2025-28410 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting use…
Critical CVSS: 9.8

CVE-2025-28410

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges
Vendor
Ruoyi
Product
Ruoyi
CWE
CWE-284
Yayın Tarihi
2025-04-07 16:15:25
Güncelleme
2025-04-09 18:53:55
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-284 Ruoyi CRITICAL Ruoyi 2025

Referanslar

https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28409.md https://github.com/yangzongzhuan/RuoYi https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28409.md