CVE-2021-21471

MEDIUM 6.5CVE-2021-21471 · Published 12/01/2021 · updated 17/06/2026

In short

CVE-2021-21471 is a MEDIUM (CVSS 6.5) vulnerability affecting cla-assistant (sap).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.7% of all vulnerabilities.
Fix: update to 2.8.5 or later.

Package	Affected versions	Patched versions
cla-assistant sap	`< 2.8.5`	`2.8.5`

Description

In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.

References

cla-assistant/cla-assistant security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free