RUoYi Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability exists in RUoYi version 4.8.0. The issue arises from the menuId parameter, which can be manipulated by remote attackers to gain elevated privileges.

Impact

Exploitation of this vulnerability allows remote attackers to escalate privileges within the application.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
6.6
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.