CVE-2025-28409

8.8HIGH

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether the requesting user has permission to ad

公開日: 4/7/2025更新日: 4/9/2025
NVDで表示MITREで表示

説明

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether the requesting user has permission to add a menu item under the specified parentId

AI分析AIによる分析

影響を受ける製品

ruoyiruoyi
4.8.0

参照