← Database

CVE-2022-23869

MEDIUM CVSS: 6.5 Published: 2022-03-30 Modified: 2026-06-17

Description

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

Affected Platforms

Ruoyi Ruoyi

Weakness Type

CWE-732

References