CVE-2022-23869 | BDVDB-2026-172913 Detail

Description#

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gitee.com/y_project/RuoYi/issues/I4RCO2

Exploit#

No public exploit known

History#

Version 12022-03-30Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.