Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2025-70985
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.0
EPSS Ranking
1.9%
CVSS Severity
CVSS v3 Score
9.1
References
https://gist.github.com/old6ma/1a2dada02656ba9a4730c85f6c765f4f
https://gitee.com/y_project/RuoYi
https://gitee.com/y_project/RuoYi/issues/IDIDK2
https://github.com/yangzongzhuan/RuoYi
Products affected by CVE-2025-70985
Ruoyi
»
Ruoyi
»
Version:
4.8.1
cpe:2.3:a:ruoyi:ruoyi:4.8.1
Ruoyi
»
Ruoyi
»
Version:
4.8.2
cpe:2.3:a:ruoyi:ruoyi:4.8.2
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved