CVE-2021-21471

Publication date

2021-01-12 14:21:12

Family

sap

State

PUBLISHED

Description

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.