Threats tagged 'ghsa-x3pg-94gm-79p3'

A vulnerability in YunaiV ruoyi-vue-pro up to version 2025.09 allows improper authorization through manipulation of an unspecified part of the /crm/business/transfer file. The flaw can be exploited remotely without user interaction. Public exploit code exists, but the vendor has not responded or provided a fix. The CVSS score is 6.3, indicating a medium severity impact on confidentiality, integrity, and availability.