CVE-2024-50967

6.5 mediumEPSS 1.8%

Medium (6.5). EPSS 1.8% chance of exploitation in the next 30 days.

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2025-01-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://datagerry.readthedocs.io/en/latest/api/rest/user-management.html#rights
https://github.com/0xByteHunter/CVE-2024-50967
https://medium.com/@0xbytehunter/my-first-cve-discovery-of-broken-access-control-in-the-datagerry-platform-7b0404f88a43

Check your stack JSON