Improper Access Control in CLA-Assistant Allows Unauthorized API Endpoint Access

CVE-2021-21471 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.

Learn more about our Api Penetration Testing.