Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cla-assistant 安全漏洞
Vulnerability Description
Cla-assistant是Cla-assistant团队的一个基于Javascript的可与Github进行集成的贡献者协议管理软件。该软件提供当贡献者拉取代码时，会要求签署CLA的功能。 CLA-Assistant 2.8.5版本及之前存在安全漏洞，该漏洞源于程序未进行正确的身份验证，攻击者可利用该漏洞执行特殊操作。
CVSS Information
N/A
Vulnerability Type
N/A