Описание
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.8.5 (исключая)
cpe:2.3:a:sap:cla-assistant:*:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00439
Низкий
6.5 Medium
CVSS3
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
NVD-CWE-Other
EPSS
Процентиль: 63%
0.00439
Низкий
6.5 Medium
CVSS3
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
NVD-CWE-Other