Vendor
cla-assistant
Products
1
CVEs
2
Across products
2
Status
Private
Products
1- 2 CVEs
Recent CVEs
2| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-29617 | 0.00 | — | 0.00 | Jun 6, 2022 | Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application. | |||
| CVE-2021-21471 | 0.00 | — | 0.00 | Jan 12, 2021 | In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application. |
- CVE-2022-29617Jun 6, 2022risk 0.00cvss —epss 0.00
Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.
- CVE-2021-21471Jan 12, 2021risk 0.00cvss —epss 0.00
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.