CVE-2021-21471

Description

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.

CVSS Version 3.1

nvd

CVE ID: CVE-2021-21471
Base Score: 6.5
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 2.8

CVSS Version 3.0

sap

CVE ID: CVE-2021-21471
Base Score: 6.5
Base Severity: MEDIUM
Vector String:CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS Version 2.0

nvd

CVE ID: CVE-2021-21471
Base Score: 4.0
Base Severity: MEDIUM
Vector String:AV:N/AC:L/Au:S/C:N/I:P/A:N

Refrence: NVDMITRE