← Database

CVE-2021-35970

HIGH CVSS: 7.5 Published: 2021-06-30 Modified: 2026-06-17

Description

Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via GraphQL because permission checks use an incorrect data type.

Affected Platforms

Voxmedia Coral Talk

Weakness Type

CWE-697

References