Description
Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data.
High · 7.5
CVE-2025-70986
EUVD-2026-4227GHSA-rchw-8w6p-7f7r
Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive departmen…
Published Jan 23, 2026 · Updated Jan 23, 2026 · Assigned by mitre