cve/2025/CVE-2025-28410.md
2025-09-29 21:09:30 +02:00

702 B

CVE-2025-28410

Description

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges

POC

Reference

Github

No PoCs found on GitHub currently.