CVE-2025-63687: Rymcu Forest

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts.

Affected products

• Rymcu Forest: up to and including 2025-09-04

Published 2025-11-07. Last modified 2026-06-17.