CVE:CVE-2021-30112
CNNVD:CNNVD-202104-484
Web-School ERP 是印度Web-School公司的一个应用系统。一个ERP应用系统。
Web-School ERP V 5.0 存在跨站请求伪造漏洞，攻击者可利用该漏洞可以通过模块核心studentleaveapplication create创建学生请假请求。
solution:Upgrade web-school enterprise_resource_planning to a higher version than 5.0,and avoid the version 5.0