Detections
Analytics
CVE-2025-63687
high
Description
An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts.
References
https://github.com/rymcu/forest/issues/193
https://gist.github.com/LockeTom/564d5be6b75bb64d120daed96d74ec9c