CVE-2025-28412

The backend management system RUoYi version 4.8.0 is vulnerable to a privilege escalation issue. A remote attacker can exploit the /editSave method within the SysNoticeController component. This vulnerability is categorized under CWE-284 (Improper Access Control) and has a CRITICAL base severity ...