Description
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles.
High · 7.5
CVE-2025-66735
EUVD-2025-204742GHSA-vfjq-wcxg-p5r3
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permissi…
Published Dec 22, 2025 · Updated Dec 22, 2025 · Assigned by mitre