CVE-2021-21471

—

CVSS 3.1

6.5 medium

EPSS

<1%p52

Published

Jan 12, 2021 (Jan 12, 2021)

Modified

Jun 17, 2026

Description

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.

Vendors: sap
Products: cla-assistant
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.