Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-42330

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-1

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShinHer Information Co., LTD. ShinHer StudyOnline System

  • unspecified to ≤ 2021affected

References