An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account.
References:GSA_kwCzR0hTQS1xcTVoLXJqajktcTlxZ84ABD6-
RuoYi vulnerable to Denial of Service by attackers with admin privileges
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:com.ruoyi:ruoyi | <= 4.8.0 | No known fixed version | |
|
|
|||