CVE-2025-63687 Missing authorization in n/a
Authorized attackers can delete arbitrary user posts due to missing authorization checks in the Forest blog platform.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-63687?
CVE-2025-63687 is a medium-severity missing authorization vulnerability in n/a, published on 7 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts.
Weakness: CWE-863
Which versions are affected by CVE-2025-63687?
It affects 1 product.
Products include Rymcu Forest.
How do I fix CVE-2025-63687?
No fix has been published for CVE-2025-63687 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-63687 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-63687 exists.
Other vulnerabilities in n/a
- CVE-2023-51804 Server-side request forgery in n/a
- CVE-2025-12925 rymcu forest UserDicController.java deleteDic authorization
- CVE-2025-12924 rymcu forest BankController.java GlobalResult authorization
- CVE-2026-2946 rymcu forest Article Content/Comments/Portfolio XssUtils.java XssUtils.replaceHtmlCode cross site scripting
- CVE-2026-2947 rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting
Sources
Also known as GHSA-2qv6-8qcf-2852.