CVE-2022-23869

2022-03-3011:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

CPENameOperatorVersion
ruoyieq4.7.0
ruoyieq4.1
ruoyieq2.3
ruoyieq2.2
ruoyieq4.6.2
ruoyieq4.3
ruoyieq3.1
ruoyieq4.0
ruoyieq4.6.0
ruoyieq4.5.1

Name	Operator	Version
ruoyi	eq	4.7.0
ruoyi	eq	4.1
ruoyi	eq	2.3
ruoyi	eq	2.2
ruoyi	eq	4.6.2
ruoyi	eq	4.3
ruoyi	eq	3.1
ruoyi	eq	4.0
ruoyi	eq	4.6.0
ruoyi	eq	4.5.1

Rows per page:

1-10 of 221

References

gitee.com/y_project/RuoYi/issues/I4RCO2