CVE-2025-66735

Mô tả

Tham khảo

• gist.github.com/old6ma/dc9e6e4a693d12c1a35fd4e1d21d4743 · Third Party Advisory
• gitee.com/youlaiorg/youlai-boot/commit/9197065102f92264ded814a9d3e9f2a4ff0da121 · Patch
• gitee.com/youlaiorg/youlai-boot/issues/ICH8FR · Exploit

Lỗ hổng khác của youlai-boot

• CVE-2025-66736CAO 7.1youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permiss…
• CVE-2025-55471CAO 7.5Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other u…
• CVE-2025-55469NGHIÊM TRỌNG 9.8Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.