Vulnerabilities (CVE)

Filtered by vendor Youlai Subscribe
Filtered by product Youlai-boot
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-55469 1 Youlai 1 Youlai-boot 2025-12-05 N/A 9.8 CRITICAL
Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.
CVE-2025-55471 1 Youlai 1 Youlai-boot 2025-12-05 N/A 7.5 HIGH
Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.