CVE-2022-23869
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-23869
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23869.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-23869
- Published
- 2022-03-30T11:15:07Z
- Modified
- 2024-09-03T04:11:19.332707Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
- References