Security Advisory

CVE-2021-42332

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-15 12:10:34
Last updated 2024-09-17 01:52:02
Assigner twcert
State PUBLISHED

Description

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.