CNNVD-202509-4223 Information
Sep 26, 2025
cve
CNNVD ID
CNNVD-202509-4223
Related CVE
- CNNVD Published: 2025-09-26
Description (Chinese)
Ruoyi是若依个人开发者的一个后台管理系统。 Ruoyi 4.8.1及之前版本存在授权问题漏洞，该漏洞源于对文件/system/role/authUser/selectAll中参数userIds的错误操作，可能导致授权不当。
Description (English)
Ruoyi is a back-office management system based on an individual developer. Ruoyi 4.8.1 and previous versions had a mandate gap, which stemmed from the mishandling of the parameter userIds in document/system/rule/authUser/selectAll, which could lead to improper delegation of authority.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2025-09-26
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.325912 https://vuldb.com/?id.325912 https://vuldb.com/?submit.653737 https://www.cnblogs.com/aibot/p/19063507
Share on: