CVE-2025-7901: yangzongzhuan RuoYi Swagger UI index.html cross site scripting
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been rated as problematic. This issue affects some unknown processing of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. The attack may be initiated remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7901?
CVE-2025-7901 has been rated as problematic.
How does CVE-2025-7901 affect the affected software?
CVE-2025-7901 affects the processing of the file /swagger-ui/index.html, leading to cross-site scripting vulnerabilities.
How do I fix CVE-2025-7901?
To fix CVE-2025-7901, ensure that the application is updated to a version higher than 4.8.1 or apply relevant patches to mitigate the vulnerability.
What is the exploit method for CVE-2025-7901?
The exploit method for CVE-2025-7901 involves manipulating the configUrl argument in Swagger UI.
Which software versions are affected by CVE-2025-7901?
CVE-2025-7901 affects yangzongzhuan RuoYi up to version 4.8.1 and possibly other associated Swagger UI components.