BaseFortify

Publication date: 2025-11-26

Last updated on: 2025-12-04

Assigner: MITRE

Description

An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-26

Last Modified

2025-12-04

Generated

2026-07-07

AI Q&A

2025-11-26

EPSS Evaluated

2026-07-05

NVD

CVE-2025-56396

Affected Vendors & Products

Vendor	Product	Version / Range
ruoyi	ruoyi	4.8.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Impact Analysis

The vulnerability can allow attackers to escalate their privileges beyond what they should have, potentially leading to unauthorized access and control over sensitive parts of the system.

Executive Summary

This vulnerability in Ruoyi 4.8.1 allows attackers to gain escalated privileges because the owning department has higher rights than the active user, enabling privilege escalation.

Hi! I’m here to help you understand CVE-2025-56396. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70