CVE-2025-28411

Summary

CVE-2025-28411 is a newly disclosed vulnerability in RUoYi version 4.8.0. This issue enables a remote attacker to exploit the editSave method located in /tool/gen/editSave and escalate privileges within the application. Successful exploitation could result in significant security implications for affected systems, making it essential for users to apply the necessary patches as soon as possible. The precise mechanics of the attack remain unknown, but it is advised that administrators take proactive measures to secure their RUoYi installations against potential threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.