CVE-2025-10277: YunaiV yudao-cloud submit improper authorization
A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The manipulation of the argument ID results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10277?
CVE-2025-10277 is classified as a high-severity vulnerability due to its potential for improper authorization leading to exploitation.
How do I fix CVE-2025-10277?
To fix CVE-2025-10277, update the YunaiV yudao-cloud software to a version later than 2025.09 that addresses this vulnerability.
What are the consequences of exploiting CVE-2025-10277?
Exploiting CVE-2025-10277 can allow an attacker to gain unauthorized access to sensitive information and perform actions without proper permissions.
Can CVE-2025-10277 be exploited remotely?
Yes, CVE-2025-10277 can be exploited remotely by manipulating the argument ID in the specified file.
Which versions of YunaiV yudao-cloud are affected by CVE-2025-10277?
CVE-2025-10277 affects YunaiV yudao-cloud versions up to and including 2025.09.