CVE-2025-28407

Published: 2025-04-07T16:15Z

Last Modified: 2025-04-09T19:00Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether the requesting user has permission to modify the specified dictId > MITRE Terms of Use apply – see LICENSE‑MITRE.txt