3 matches found
CVE-2025-28411
An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...
9.8CVSS0.00651EPSS
SaveExploits1References2
CVE-2025-28411
An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...
0.00651EPSS
SaveExploits1References2
CVE-2025-28411
A security vulnerability exists in RUoYi v.4.8.0 due to improper access control in the editSave method within the /tool/gen/editSave API endpoint. A remote attacker can exploit this issue to escalate privileges . As a temporary workaround, it is recommended to disable the editSave method or restr...
9.8CVSS7.4AI score0.00651EPSS
SaveExploits1References2Affected Software1
20