CVE-2025-28412

The backend management system RUoYi version 4.8.0 is vulnerable to a privilege escalation issue. A remote attacker can exploit the /editSave method within the SysNoticeController component. This vulnerability is categorized under CWE-284 (Improper Access Control) and has a CRITICAL base severity ...

CVE-2025-28412: Improper Access Control

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the /editSave method in SysNoticeController...

PT-2025-15252 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the "/editSave" method in SysNoticeController. Recommendations: For RUoYi version 4.8.0, as a temporary workaround, consider disabling the...

RuoYi AI 安全漏洞

RuoYi AI is a full-stack AI development platform for ageerle individual developers, designed to help developers rapidly build and deploy personalized AI applications. A security vulnerability exists in RuoYi AI version 2.0.0 and earlier, which stems from improper authorization in the...