Vendors / rymcu Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now rymcu records in CISA KEV No rymcu vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.rymcu.forest.web.api.common.UploadController file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00657 · Published 2024-01-13 · No fix listed CWE-918
Priority HIGH 70
A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00473 · Published 2025-11-10 · No fix listed CWE-862
Priority MEDIUM 62
An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete ar…
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0027 · Published 2025-11-07 · No fix listed CWE-863
Priority MEDIUM 56
A vulnerability was detected in rymcu forest up to 0.0.5.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00329 · Published 2026-02-22 · No fix listed CWE-79
Priority MEDIUM 56
A security vulnerability has been detected in rymcu forest up to 0.0.5.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00258 · Published 2026-02-22 · No fix listed CWE-79
Priority LOW 24
A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00369 · Published 2025-11-10 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High1 Medium5 Low0 No CVSS0