CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. See the original NVD description below for full technical details.
CVE
CVE-2022-23869
Severity
MEDIUM
CVSS
6.5
EPSS
0.67%
Original NVD Description
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Related CVEs
Other vulnerabilities affecting the same vendor(s)