CVE-2025-7907 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src…
Medium CVSS: 5.3

CVE-2025-7907

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src/main/resources/application-druid.yml of the component Druid. The manipulation leads to use of default credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Vendor
Ruoyi
Product
Ruoyi
CWE
CWE-1392
Yayın Tarihi
2025-07-20 21:15:23
Güncelleme
2025-08-08 16:22:26
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-1392 Ruoyi MEDIUM Ruoyi 2025

Referanslar

https://github.com/yangzongzhuan/RuoYi/issues/297 https://vuldb.com/?ctiid.317022 https://vuldb.com/?id.317022 https://vuldb.com/?submit.618362 https://github.com/yangzongzhuan/RuoYi/issues/297