Description
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Unscored
CVE-2022-23869
EUVD-2022-28794GHSA-2h36-h7fr-hrvc
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 …
Published Mar 30, 2022 · Updated Aug 3, 2024 · Assigned by mitre