CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

CVE-2025-28411

CVE-2025-28411 affects RUoYi v4.8.0. The issue resides in the editSave function under /tool/gen/editSave, allowing a remote attacker to escalate privileges. Current sources consistently describe a privilege-escalation flaw in RUoYi without listing affected variants beyond v4.8.0. Exploitation det...