CVE-2025-3202

Summary

CVE-2025-3202 is a critical vulnerability affecting ageerle ruoyi-ai up to version 2.0.0. An unidentified function in the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysNoticeController.java has been discovered to allow for improper authorization. This issue can be exploited remotely, making it a significant security risk. The exploit for this vulnerability has been made public, increasing the threat level. To mitigate this issue, upgrading to version 2.0.1 is recommended. The patch for this vulnerability is 6382e177bf90cc56ff70521842409e35c50df32d. It is strongly advised to apply the update as soon as possible to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.