PT-2025-30208 · Yangzongzhuan · Ruoyi

Zast.Ai · Published 2025-07-20 · Updated 2025-07-20 · CVE-2025-7903

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions up to 4.8.1

Description A problematic issue exists in yangzongzhuan RuoYi, specifically within the Image Source Handler component. This issue involves improper restriction of rendered UI layers and can be exploited remotely. The details of the exploit have been publicly disclosed.

Recommendations Update yangzongzhuan RuoYi to a version beyond 4.8.1.

Exploit

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2025-7903

Affected Products

Ruoyi

References · 9

• 🔥 https://github.com/yangzongzhuan/RuoYi/issues/295 · Exploit
• https://osv.dev/vulnerability/CVE-2025-7903 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7903 · Security Note
• https://vuldb.com/?ctiid.317017 · Note
• https://vuldb.com/?id.317017 · Note
• https://t.me/cvetracker/28281 · Telegram Post
• https://vuldb.com/?submit.618357 · Note
• https://twitter.com/CVEnew/status/1946981992903364726 · Twitter Post
• https://t.me/cvenotify/129618 · Telegram Post