CVE-2023-46963

2023-11-0400:00:00

mitre

www.cve.org

beijing yunfan

sensitive information

remote attacker

password parameter

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.7%

JSON

An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function.

References

github.com/NBSLclass/glassfish/blob/main/Proof-of-vulnerability.md