← Database

CVE-2025-28407

HIGH CVSS: 8.8 Published: 2025-04-07 Modified: 2026-06-17

Description

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether the requesting user has permission to modify the specified dictId

Affected Platforms

Ruoyi Ruoyi

Weakness Type

CWE-284

References