Vulnerabilities

TI-2021-18762 CVE-2021-42332 · GHSA-7xh8-5gm5-5q2f

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3

LOW 21

The “List View” function of ShinHer StudyOnline System is not under authority control.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00764 Published 2021-10-15 No fix listed CWE-285

TI-2021-18761 CVE-2021-42331 · GHSA-wxc7-jc57-c2hc

LOW 25

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00641 Published 2021-10-15 No fix listed CWE-285

TI-2021-18760 CVE-2021-42330 · GHSA-xq9f-7hxc-qrqx

MEDIUM 40

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00981 Published 2021-10-15 No fix listed CWE-285

TI-2021-18759 CVE-2021-42329 · GHSA-x6v4-jh5f-25pv

LOW 25

The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-10-15 No fix listed CWE-79