CVEvulnerability

CVE-2024-50967

6.5 MEDIUM Published 2025-01-17 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-01-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses: CWE-862

Description

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.

Weakness · CWE (1)

CWE-862 Missing Authorization weakness

References

https://datagerry.readthedocs.io/en/latest/api/rest/user-management.html#rights datagerry.readthedocs.io
https://github.com/0xByteHunter/CVE-2024-50967 github.com
https://medium.com/@0xbytehunter/my-first-cve-discovery-of-broken-access-control-in-the-datagerry-platform-7b0404f88a43 medium.com

CVE-2024-50967

Description

Related

Weakness · CWE (1)

References