RuoYi - XSS (CVE-2025-7901)
Description
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been rated as problematic. This issue affects some unknown processing of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. The attack may be initiated remotely.
psychologyCrowdSec Analysis
CVE-2025-7901 is a cross-site scripting vulnerability in yangzongzhuan RuoYi up to version 4.8.1, specifically affecting the Swagger UI component via the configUrl parameter. This flaw allows remote attackers to inject malicious scripts, potentially leading to session hijacking or unauthorized actions when users interact with the affected interface.
CrowdSec has been tracking this vulnerability and its exploits since 10th of December 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2025-7901 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit the /swagger-ui/index.html endpoint by injecting malicious URLs into the configUrl parameter, leading to DOM-based XSS and execution of arbitrary scripts in users' browsers.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2025-07-20 |
| Rule Released | 2025-12-10 |
Related Weaknesses
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.