Beveiligingsadvies

CVE-2021-42332

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-10-15 12:10:34
Laatst bijgewerkt 2024-09-17 01:52:02
Toegewezen door twcert
CVSS-score 4.3
Status PUBLISHED

Beschrijving

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.