RUoYi Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability has been identified in RUoYi version 4.8.0. The issue arises in the 'changeStatus' method, allowing remote attackers to escalate privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
6.6
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.