CVE-2025-55471: High severity youla youlai-boot vulnerability
Published Nov 26, 2025
·Updated
Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.
Affected Software
2 affected components
youla youlai-boot
youlai youlai-boot=2.21.1
Event History
Nov 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55471?
CVE-2025-55471 is considered a high severity vulnerability due to incorrect access control that exposes sensitive user information.
2
How do I fix CVE-2025-55471?
To fix CVE-2025-55471, ensure proper access control mechanisms are implemented in the getUserFormData function.
3
Who is affected by CVE-2025-55471?
CVE-2025-55471 affects users of youlai-boot version 2.21.1 and possibly earlier versions.
4
What kind of information can be accessed due to CVE-2025-55471?
CVE-2025-55471 allows attackers to access sensitive information belonging to other users.
5
Is there a patch available for CVE-2025-55471?
A patch for CVE-2025-55471 may be available, so check the latest updates from the vendor for youlai-boot.