high7.3
CVE-2025-25585
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Admin…
Impact
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| R1bbit | Yimioa | before 2024.07.04 |