CVE-2025-70985

Publication date

2026-01-23 00:00:00

Family

mitre

State

PUBLISHED

Description

Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.