Approved changes feed: RSS · Atom

cpe:2.3:a:ruoyi:ruoyi:4.7.2:*:*:*:*:*:*:*

part: a version: 4.7.2 update: *

VendorRuoyi (a1e9b548-8c40-5372-82d6-75ba62c50bcc)
ProductRuoyi (bfb7fb4b-ffd1-597f-a690-4f054b2e8325)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23869 vulnerable 2026-06-08 05:40:59.289213 Details available
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request.
Published: 2022-03-30T10:15:55.000Z
Updated: 2024-08-03T03:51:46.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23868 vulnerable 2026-06-08 05:40:59.288801 Details available
RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file.
Published: 2022-03-30T10:14:16.000Z
Updated: 2024-08-03T03:51:46.096Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.