yangzongzhuan RuoYi Image Source ui layer_CVE-2025-7903

5.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Basic Information

ID CVE-2025-7903

Source VulDB

Published Jul 20, 2025 at 16:32

Modified Jul 21, 2025 at 16:05

Affected Product

Vendor yangzongzhuan

Product RuoYi

Version 4.8.0

Affected Versions yangzongzhuan RuoYi 4.8.0
yangzongzhuan RuoYi 4.8.1

CWE Classification

CWE-1021

References

{
    "lastseen": "",
    "description": "A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
    "published": "2025-07-20T16:32:05.647Z",
    "modified": "2025-07-21T16:05:13.228Z",
    "type": "cve",
    "title": "yangzongzhuan RuoYi Image Source ui layer",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.317017\nhttps://vuldb.com/?ctiid.317017\nhttps://vuldb.com/?submit.618357\nhttps://github.com/yangzongzhuan/RuoYi/issues/295",
    "id": "CVE-2025-7903",
    "bulletinFamily": "",
    "cwe": [
        "CWE-1021"
    ],
    "cvelist": null,
    "sourceData": "yangzongzhuan RuoYi 4.8.0\nyangzongzhuan RuoYi 4.8.1",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "RuoYi",
    "version": "4.8.0",
    "vendor": "yangzongzhuan",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}