CVE-2021-42330

8.8 highEPSS 1.0%

High (8.8) in xinheinformation xinhe teaching platform system. EPSS 1.0% chance of exploitation in the next 30 days.

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2021-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xinheinformation:xinhe_teaching_platform_system

References

https://www.twcert.org.tw/tw/cp-132-5200-3d3ca-1.html
https://www.twcert.org.tw/tw/cp-132-5200-3d3ca-1.html

Check your stack JSON