Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 26 Nov 2025 18:15:00 +0000

Type Values Removed Values Added
Description Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-11-26T18:05:17.334Z

Reserved: 2025-08-13T00:00:00.000Z

Link: CVE-2025-55471

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-11-26T18:15:48.820

Modified: 2025-11-26T18:15:48.820

Link: CVE-2025-55471

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.