VULNERABILITY INTELLIGENCE

CVE-2025-28411

CVSS score9.8 CRITICAL

EPSS probability0.66%

CISA KEVNot currently listed

Published2025-04-07

Last modified2026-06-17

Description

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave