CVE-2025-28403

Summary

CVE-2025-28403 is a vulnerability affecting RUoYi version 4.8.0. This issue enables a remote attacker to escalate privileges by exploiting the editSave method, which fails to adequately verify user administrative privileges before permitting modifications to system configuration settings. Unauthorized changes to these settings could lead to serious security consequences. Attackers may exploit this vulnerability to gain elevated access and potentially install malicious software, resulting in a compromised system. System administrators are advised to apply the necessary patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.