CVE-2025-4819 | y_project RuoYi 4.8.0 Offline Logout batchForceLogout ids improper authorization

A vulnerability classified as problematic has been found in y_project RuoYi 4.8.0. Affected is an unknown function of the file /monitor/online/batchForceLogout of the component Offline Logout. The manipulation of the argument ids leads to improper authorization.

This vulnerability is traded as CVE-2025-4819. It is possible to launch the attack remotely. Furthermore, there is an exploit available.