medium4.3
CVE-2021-42336
The learning history page of the Easytest is vulnerable by permission bypass.
Impact
The learning history page of the Easytest is vulnerable by permission bypass. After obtaining a user’s permission, remote attackers can access other users’ and administrator’s account information except password by crafting URL parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huaju | Easytest Online Learning Test Platform | Version 1705 |