CVE-2024-13110

Name of the Vulnerable Software and Affected Versions Beijing Yunfan Internet Technology Yunfan Learning Examination System version 1.9.2

Description A problematic issue has been found in the Beijing Yunfan Internet Technology Yunfan Learning Examination System. It affects an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.java, which is part of the Exam Answer Handler component. This issue leads to information disclosure and can be exploited remotely. The exploit has been made public.

Recommendations For version 1.9.2, consider restricting access to the Exam Answer Handler component until a patch is available. As a temporary workaround, avoid using the affected function in the PaperController.java file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.