CVE-2024-13110

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/qiutiandefeng/yfexam-exam/issues/5", "name": "https://github.com/qiutiandefeng/yfexam-exam/issues/5", "tags": [], "refsource": ""}, {"url": "https://github.com/qiutiandefeng/yfexam-exam/issues/5#issue-2754675223", "name": "https://github.com/qiutiandefeng/yfexam-exam/issues/5#issue-2754675223", "tags": [], "refsource": ""}, {"url": "https://vuldb.com/?ctiid.289926", "name": "VDB-289926 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [], "refsource": ""}, {"url": "https://vuldb.com/?id.289926", "name": "VDB-289926 | Beijing Yunfan Internet Technology Yunfan Learning Examination System Exam Answer PaperController.java, information disclosure", "tags": [], "refsource": ""}, {"url": "https://vuldb.com/?submit.467700", "name": "Submit #467700 | Beijing Yunfan Internet Technology Co., Ltd yfexam-exam 1.9.2 logical loophole", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.java, of the component Exam Answer Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-13110", "ASSIGNER": "cna@vuldb.com"}}, "impact": {}, "publishedDate": "2025-01-02T14:15Z", "configurations": {"nodes": [], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-01-02T14:15Z"}