RUoYi Privilege Escalation Vulnerability
Vulnerability
A privilege escalation vulnerability exists in RUoYi version 4.8.0. The issue arises in the 'edit' method, where the 'postID' parameter can be manipulated by remote attackers to gain elevated privileges.
Impact
Exploitation of this vulnerability allows for unauthorized privilege escalation, potentially giving users access to restricted functions or data within the application.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
6.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.