CVE-2025-7907
BaseFortify
Publication date: 2025-07-20
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ruoyi | ruoyi | to 4.8.1 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1392 | The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in yangzongzhuan RuoYi up to version 4.8.1, specifically in an unknown function within the file ruoyi-admin/src/main/resources/application-druid.yml related to the Druid component. The issue involves the use of default credentials, which can be exploited remotely. This means an attacker can potentially access the system without proper authentication by leveraging these default credentials.
How can this vulnerability impact me? :
The vulnerability allows remote attackers to use default credentials to gain unauthorized access to the affected system. This can lead to potential unauthorized access or control over the system, compromising its security and possibly exposing sensitive data or functionality.