Medium severity · published Jul 20, 2025
CVE-2025-7907
yangzongzhuan RuoYi Druid application-druid.yml default credentials
4.3
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src/main/resources/application-druid.yml of the component Druid. The manipulation leads to use of default credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
RuoYi · yangzongzhuan
4.8.0; 4.8.1 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7907
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7907
Exploit
https://github.com/yangzongzhuan/RuoYi/issues/297
Permissions Required
https://vuldb.com/?ctiid.317022
Third Party Advisory
https://vuldb.com/?id.317022
Third Party Advisory
https://vuldb.com/?submit.618362
More from RuoYi
9.8
CVE-2025-10473
yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection
8.8
CVE-2025-10989
yangzongzhuan RuoYi selectAll improper authorization
6.1
CVE-2025-7901
yangzongzhuan RuoYi Swagger UI index.html cross site scripting
5.4
CVE-2025-10384
yangzongzhuan RuoYi Role cancelAll improper authorization
5.4
CVE-2025-8847
yangzongzhuan RuoYi edit cross site scripting