In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ruoyi ruoyi 4.7.2 |