Improper authorization in ageerle ruoyi-ai SysNoticeController (CVE-2025-3202)
Date: 2025
Affected: ageerle/ruoyi-ai <=2.0.0
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: High

Critical improper-authorization vulnerability in ageerle ruoyi-ai up to 2.0.0 in SysNoticeController.java.


Mitigations:

Architectural layers (MAESTRO):