Forest vulnerabilities

2 known vulnerabilities in Forest from Rymcu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  forest: Missing Authorization

  CVE-2025-12925Nov 10, 2025Rymcu

  A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the function getAll/addDic/getAllDic/deleteDic of the file src/main/java/com/rymcu/forest/lucene/api/UserDicController.java. The manipulation result

• 7.5 High severity

  Forest: Server-Side Request Forgery

  CVE-2023-51804Jan 13, 2024Rymcu

  An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.rymcu.forest.web.api.common.UploadController file.