CVE-2024-13111

Medium CVSS: 6.3

A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token Handler. The manipulation leads to improper authentication. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

Vendor

Kaoshifeng

Product

Yunfan Learning Examination System

CWE

CWE-287

Yayın Tarihi

2025-01-02 14:15:06

Güncelleme

2025-08-25 17:12:43

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-287 Yunfan Learning Examination System MEDIUM Kaoshifeng 2025

Referanslar

https://github.com/qiutiandefeng/yfexam-exam/issues/6 https://github.com/qiutiandefeng/yfexam-exam/issues/6#issue-2754680012 https://vuldb.com/?ctiid.289927 https://vuldb.com/?id.289927 https://vuldb.com/?submit.467701 https://github.com/qiutiandefeng/yfexam-exam/issues/6 https://github.com/qiutiandefeng/yfexam-exam/issues/6#issue-2754680012