CVE-2025-12924: A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the…
CVE-2025-12924 · Severity: medium · CVSS 4.3 · Published 2025-11-10
A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the function GlobalResult of the file src/main/java/com/rymcu/forest/web/api/bank/BankController.java. The manipulation leads to missing authorization. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.
No. Junglewise Threat Intelligence has no report of CVE-2025-12924 being exploited in the wild.
How severe is CVE-2025-12924?
Medium severity, with a CVSS score of 4.3, published 10 November 2025.
Which products and versions are affected?
Rymcu Forest. The advisory does not name versions.
Is there a fix for CVE-2025-12924?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-12924?
Check whether you run Rymcu Forest. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.