Description
An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} endpoint does not properly validate the deptId parameter
Critical · 9.8
CVE-2025-28408
EUVD-2025-10357GHSA-8843-g665-5rpj
An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} end…
Published Apr 7, 2025 · Updated Apr 8, 2025 · Assigned by mitre