← Back to CVE List
CVE-2021-35970
Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via GraphQL because permission checks use an incorrect data type.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt