Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-42331

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShinHer Information Co., LTD. ShinHer StudyOnline System

  • unspecified to ≤ 2021affected

References