CVE-2025-28403

7.2HIGH

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly validate whether the requesting user has administrative privileges before allowing m

发布于: 4/7/2025更新于: 4/9/2025
在NVD查看在MITRE查看

描述

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings

AI分析AI驱动

受影响产品

ruoyiruoyi
4.8.0

参考资料