CVE-2025-7901 | yangzongzhuan RuoYi up to 4.8.1 Swagger UI /swagger-ui/index.html configUrl cross site scripting (Issue 293)

July 19, 2025 Yanac

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been rated as problematic. This issue affects some unknown processing of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting.

The identification of this vulnerability is CVE-2025-7901. The attack may be initiated remotely. There is no exploit available.VulDB Recent EntriesRead More