Authorization Flaw in Rymcu Forest Product

CVE-2025-12925

What is CVE-2025-12925?

A security vulnerability has been identified in Rymcu Forest, specifically affecting the getAll, addDic, getAllDic, and deleteDic functions within the UserDicController.java file. This flaw allows unauthorized access due to the lack of proper authentication checks. The vulnerability is exploitable remotely, enabling attackers to manipulate user dictionaries without appropriate permissions. The product follows a rolling release model, which means it continuously updates without distinct version numbers for affected releases.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References