Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Beijing Yunfan Internet Technology Yunfan Learning Examination System JWT Token SysUserControl improper authentication
Vulnerability Description
A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token Handler. The manipulation leads to improper authentication. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
认证机制不恰当
Vulnerability Title
Yunfan Learning Examination System 安全漏洞
Vulnerability Description
Yunfan Learning Examination System是中国云帆（Yunfan）公司的一款考试应用程序。 Yunfan Learning Examination System 1.9.2版本存在安全漏洞，该漏洞源于文件src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl的未知功能会导致身份验证不正确。
CVSS Information
N/A
Vulnerability Type
N/A