Логотип exploitDog
bind:CVE-2022-23869
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-23869

Количество 2

Количество 2

nvd логотип

CVE-2022-23869

почти 4 года назад

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-2h36-h7fr-hrvc

почти 4 года назад

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-23869

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

CVSS3: 6.5
0%
Низкий
почти 4 года назад
github логотип
GHSA-2h36-h7fr-hrvc

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.

CVSS3: 6.5
0%
Низкий
почти 4 года назад

Уязвимостей на страницу