CVE-2021-42332

4.3 mediumEPSS 0.8%

Medium (4.3) in xinheinformation xinhe teaching platform system. EPSS 0.8% chance of exploitation in the next 30 days.

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2021-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xinheinformation:xinhe_teaching_platform_system

References

https://www.twcert.org.tw/tw/cp-132-5202-49681-1.html
https://www.twcert.org.tw/tw/cp-132-5202-49681-1.html

Check your stack JSON