← Back to CVE List

CVE-2021-42331

Published: 2021-10-15T12:15Z
Last Modified: 2024-11-21T06:27Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt