CVE-2025-55471

概要

参考情報

• gist.github.com/old6ma/08d83e5aa7d47e7ff18b23337ccd1f1d · Third Party Advisory
• gitee.com/youlaiorg/youlai-boot · Product
• gitee.com/youlaiorg/youlai-boot/issues/ICFBW8 · Exploit

youlai-boot のその他の脆弱性

• CVE-2025-66736高 7.1youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permiss…
• CVE-2025-66735高 7.5youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permissio…
• CVE-2025-55469緊急 9.8Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.