CVE-2025-28411: Improper Access Control

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

PT-2025-15251

Name of the Vulnerable Software and Affected Versions RUoYi version 4.8.0 Description The issue allows a remote attacker to escalate privileges via the editSave method in the "/tool/gen/editSave" API endpoint. Recommendations For RUoYi version 4.8.0, as a temporary workaround, consider disabling...

CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...