Read the docs
TI-2020-03438 Aliases CVE-2020-3938GHSA-2ff4-qhx5-wwhw

SysJust Syuan-Gu-Da-Shih -Request-Forgery

Priority MEDIUM 45CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests.

Why it matters now

EPSS 0.01481 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CHANGINGSyuan-Gu-Da-Shihup to 20191223—No fix listedCNA
  • Syuan-Gu-Da-Shih VendorCHANGING Affected up to 20191223 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sysjust:syuan-gu-da-shin:*:*:*:*:*:*:*:*before 20191223VulnerableSysJust
  • cpe:2.3:a:sysjust:syuan-gu-da-shin:*:*:*:*:*:*:*:* Versions before 20191223 Vulnerable ·SysJust

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-3938
  2. 2026-10-03 Alias added: GHSA-2ff4-qhx5-wwhw

References

Advisory 2

  • TI-2022-18452 ChangingTec MegaServiSignAdapter - Improper Input Validation CVSS 3.1CRITICAL 9.8
  • TI-2022-18448 Changing Information Technology Inc. RAVA certificate validation system - SQL Injection CVSS 3.1CRITICAL 9.8
  • TI-2026-02589 Changing｜IDExpert Windows Logon Agent - Remote Code Execution CVSS 4.0CRITICAL 9.3
  • TI-2026-02588 Changing｜IDExpert Windows Logon Agent - Remote Code Execution CVSS 4.0CRITICAL 9.3
  • TI-2021-15669 CHANGING Inc. TSSServiSignAdapter Windows Versions - Improper Input Validation CVSS 3.1CRITICAL 9.8
  • TI-2020-15835 CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow CVSS 3.1CRITICAL 9.8
See all 41 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences