CVE-2021-21471

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by…

Medium · published January 12, 2021

CVSS v3.0
6.5
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00738 · 54.0th percentile
Published
2021-01-12T14:21Z
EPSS history
Timeline
  • 12 JAN 14:21Z
    In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by…
    cvelistv5