CVE-2025-10988: YunaiV ruoyi-vue-pro transfer improper authorization
A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10988?
CVE-2025-10988 has been categorized as a high severity vulnerability due to its potential for improper authorization leading to sensitive data exposure.
How do I fix CVE-2025-10988?
To fix CVE-2025-10988, it is recommended to update YunaiV ruoyi-vue-pro to a version higher than 2025.09 that addresses the authorization issue.
What part of the software is affected by CVE-2025-10988?
CVE-2025-10988 affects the file located at /crm/business/transfer within YunaiV ruoyi-vue-pro.
Can CVE-2025-10988 be exploited remotely?
Yes, CVE-2025-10988 can be exploited remotely, allowing attackers to manipulate authorization processes.
Is there a public exploit available for CVE-2025-10988?
Yes, an exploit for CVE-2025-10988 is publicly available, increasing the urgency for remediation.