4.8.1
4.8.2
CVE-2025-8847 describes a cross-site scripting (XSS) vulnerability affecting RuoYi versions 4.8.0 through 4.8.1. This vulnerability allows attackers to inject malicious scripts into the application, potentially leading to session hijacking or defacement. The issue resides within the /system/notice/edit endpoint, specifically in the handling of the noticeTitle and noticeContent parameters. A patch is available in version 4.8.2.
Successful exploitation of CVE-2025-8847 allows an attacker to execute arbitrary JavaScript code within the context of a victim's browser session. This can lead to a variety of malicious outcomes, including stealing session cookies, redirecting users to phishing sites, or modifying the content displayed on the RuoYi application. Given the nature of XSS, the impact can range from minor annoyance to complete compromise of user accounts and data. The vulnerability's remote accessibility significantly broadens the attack surface, making it a potential target for widespread exploitation.
CVE-2025-8847 has been publicly disclosed, increasing the likelihood of exploitation. While no active campaigns have been definitively linked to this specific CVE, the availability of public information makes it a potential target for opportunistic attackers. The CVSS score of 3.5 (LOW) indicates a relatively low probability of exploitation, but the ease of exploitation and the potential impact warrant attention. The vulnerability was published on 2025-08-11.
Exploit Status
EPSS
0.03% (8% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-8847 is to upgrade RuoYi to version 4.8.2 or later, which includes the necessary fix. If immediate upgrading is not possible, consider implementing input validation and output encoding on the noticeTitle and noticeContent parameters within the /system/notice/edit endpoint. Web application firewalls (WAFs) can also be configured to detect and block XSS attempts targeting this specific endpoint. Regularly review and update RuoYi's security configuration to minimize the risk of similar vulnerabilities.
Update RuoYi to a version later than 4.8.1 that has fixed the XSS vulnerability. Refer to the vendor's website for the latest version and upgrade instructions. As a temporary measure, validate and escape all user input in the noticeTitle and noticeContent fields.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2025-8847 is a cross-site scripting (XSS) vulnerability in RuoYi versions 4.8.0–4.8.1, allowing attackers to inject malicious scripts via the /system/notice/edit endpoint.
You are affected if you are running RuoYi versions 4.8.0 or 4.8.1 and have not upgraded to 4.8.2 or implemented mitigating controls.
Upgrade RuoYi to version 4.8.2 or later. Implement input validation and output encoding on the noticeTitle and noticeContent parameters as a temporary workaround.
While no confirmed active campaigns are known, the vulnerability has been publicly disclosed and may be targeted by opportunistic attackers.
Refer to the RuoYi project's official website or security advisories for the latest information and updates regarding CVE-2025-8847.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.