CVE-2024-13111

CVE-2024-13111 is a critical improper authentication vulnerability in the Beijing Yunfan Internet Technology Yunfan Learning Examination System version 1.9.2, specifically within the JWT Token Handler component. This vulnerability allows for remote attacks with high complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it has garnered minimal community discussion or media coverage. Despite the disclosed exploit, its difficult nature and low EPSS score suggest a lower immediate threat compared to other vulnerabilities.