CVE-2021-38617: Undefined Security Weakness

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation...

PT-2021-22248

Name of the Vulnerable Software and Affected Versions Eigen NLP version 3.10.1 Description A lack of access control on the "/auth/v1/user/user-guid/" user edition endpoint could permit any logged-in user to increase their own permissions via a user permissions array in a PATCH request. A guest us...

PT-2021-22249

Name of the Vulnerable Software and Affected Versions Eigen NLP version 3.10.1 Description The issue is related to a lack of access control on the "/auth/v1/user/" endpoint, which allows a standard user to create a super user account with a defined password. This leads to privilege escalation...