CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

CVE-2025-66736

The youlai-boot permission management system (version V2.21.1 ) is vulnerable to an authorization bypass due to incorrect access control . The root cause is located in the importUsers function within the SysUserController.java component, which fails to perform a permission check on the current us...

youlai-boot 安全漏洞

youlai-boot is a permission management system open source by China youlaiorg. A security vulnerability exists in version V2.21.1 of youlai-boot. The vulnerability stems from the importUsers function in SysUserController.java not checking the current user's identity for permissions, which could le...