A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src/main/resources/application-druid.yml of the component Druid. The manipulation leads to use of default credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/yangzongzhuan/RuoYi/issues/297 | Exploit |
| https://github.com/yangzongzhuan/RuoYi/issues/297 | Exploit |
| https://vuldb.com/?ctiid.317022 | Permissions Required VDB Entry |
| https://vuldb.com/?id.317022 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.618362 | Third Party Advisory VDB Entry |
Configurations
History
08 Aug 2025, 16:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:* | |
| First Time |
Ruoyi
Ruoyi ruoyi |
|
| References | () https://vuldb.com/?id.317022 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.618362 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/yangzongzhuan/RuoYi/issues/297 - Exploit | |
| References | () https://vuldb.com/?ctiid.317022 - Permissions Required, VDB Entry |
21 Jul 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE |
20 Jul 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-20 21:15
Updated : 2025-08-08 16:22
NVD link : CVE-2025-7907
Mitre link : CVE-2025-7907
JSON object : View
Products Affected
ruoyi
- ruoyi
CWE
No CWE.