CVE-2021-42337

CVE-2021-42337 is a permission bypass vulnerability in the AIFU cashier management salary query function, affecting the aifu cashier_accounting_management_system. An authenticated, low-privileged remote attacker can exploit this flaw by manipulating URL parameters to access sensitive account information, excluding passwords. Rated as MEDIUM severity (CVSS 4.3), this vulnerability has low attack complexity and does not require user interaction, leading to a partial loss of confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.