2 matches found
CVE-2022-23869
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request...
6.9AI score
SaveExploits0References3
CVE-2022-23869: Incorrect Permission Assignment for Critical Resource
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request...
6.5CVSS6.6AI score0.00678EPSS
SaveExploits1References2
20