1. Home
  2. CVE Database
  3. CVE-2021-42331
MEDIUM · 5.4

CVE-2021-42331

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule...

Vulnerability Description

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
XinheinformationXinhe Teaching Platform Systemv2021

Related Weaknesses (CWE)

CWE-285CWE-862

References

FAQ

What is CVE-2021-42331?

CVE-2021-42331 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule...

How severe is CVE-2021-42331?

CVE-2021-42331 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-42331?

Check the references section above for vendor advisories and patch information. Affected products include: Xinheinformation Xinhe Teaching Platform System.