CVE-2021-42331

5.4 mediumEPSS 0.6%

Medium (5.4) in xinheinformation xinhe teaching platform system. EPSS 0.6% chance of exploitation in the next 30 days.

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWEs: CWE-862, CWE-285
Published: 2021-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xinheinformation:xinhe_teaching_platform_system

References

https://www.twcert.org.tw/tw/cp-132-5201-dc534-1.html
https://www.twcert.org.tw/tw/cp-132-5201-dc534-1.html

Check your stack JSON