Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2021-42332

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShinHer Information Co., LTD. ShinHer StudyOnline System

  • unspecified to ≤ 2021affected

References