CVE-2025-63687

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Nov 7, 2025

CISA due date

—

The record

An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts.

Affected packages

Ecosystem	Package	Introduced	Fixed