Eladmin Password Reset Vulnerability in User Management Module

A vulnerability exists in Eladmin versions through 2.7, allowing arbitrary password resets for any user, regardless of permission level. This issue is present in the user management module, specifically within the '/api/users/resetPwd' endpoint.

Impact

Exploitation of this vulnerability allows unauthorized password resets, potentially leading to unauthorized access to user accounts.

Reproduction

To reproduce this vulnerability, send a request to the '/api/users/resetPwd' endpoint with a JSON array containing the IDs of the users whose passwords should be reset. The response will indicate a successful reset, after which the admin account can be accessed using the default password '123456'.

Remediation

It is recommended to update to the latest version of Eladmin, where this vulnerability has been addressed.