VULNERABILITY INTELLIGENCE

CVE-2021-42332

CVSS score4.3 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2021-10-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

Weakness classification

  • twcert@cert.org.tw: CWE-285
  • nvd@nist.gov: NVD-CWE-Other

Primary references