CVE-2025-28401

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - cve@mitre.org

Published

2025-04-07

Last modified

2025-04-07

Weaknesses

CWE-269

Affected products

• Ruoyi (Ruoyi)

References

• https://github.com/yangzongzhuan/RuoYi