CVE Catalog
CVE-2025-70985
CriticalSummary
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside their scope.
Risk Assessment
Attackers can modify data they should not access, potentially leading to data integrity issues and privilege escalation.
Recommendation
Update RuoYi to the latest patched version and audit access controls in the update function.
Original NVD description (English source)
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.