What’s Vulnerable › Vulnerabilities
CVE-2022-23869
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-03-30 · updated 2026-06-17
- Weakness: CWE-732
Description
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Affected products
- yangzongzhuan RuoYi: 4.7.2
References
Get alerted when CVE-2022-23869 or the next vulnerability affects your stack