CVE-2023-39438

creationtimestamp| type| source ---|---|--- 2023-08-15 20:30:53+00:00| seen| https://t.me/cibsecurity/68555...

CVE-2023-39438 Missing Authorization check allows certain operations on CLA Assistant data

A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CLA-assistant by executing specific additional steps. This allows an arbitrary authenticated user to read CLA information including information of the persons who signed them as...