CVE-2025-55471

Impact

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://gist.github.com/old6ma/08d83e5aa7d47e7ff18b23337ccd1f1d
• https://gitee.com/youlaiorg/youlai-boot
• https://gitee.com/youlaiorg/youlai-boot/issues/ICFBW8