CVE-2021-22538

CVE-2021-22538 is a privilege-escalation flaw in the Google Exposure Notification Verification Server (versions before 0.23.1). An attacker with UserWrite permissions and using a crafted request or malicious proxy can create a new user with higher privileges due to insufficient checks on the allo...