| Package | Affected versions | Patched versions |
|---|---|---|
| ruoyi | = 4.7.2 |
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free