CVE-2022-23869

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through…

published March 30, 2022

CVSS
—
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00678 · 51.7th percentile
Published
2022-03-30T10:15Z
EPSS history
Timeline
  • 30 MAR 10:15Z
    In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through…
    cvelistv5