CVE-2021-38617

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation...

CVE-2021-38617

Eigen NLP 3.10.1 is affected. The issue stems from a lack of access control on the /auth/v1/user/ endpoint, allowing a standard user to create a superuser with a defined password, enabling privilege escalation. The CVSS data in the linked records indicates a high-severity impact (CVSS 3.1 base sc...