26 matches found
CVE-2026-57853
DataGerry versions prior to 3.3.0 are vulnerable to a server-side template injection (SSTI) vulnerability. Authenticated attackers with base.docapi.template.add permissions can inject arbitrary Jinja2 payloads into the template_data field using POST /rest/docapi/template. When a user requests the...
EUVD-2026-117011
DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the templatedata field via POST /rest/docapi/template, which is later rendered in a non-sandboxed Jinja...
DATAGERRY - REST API Auth Bypass
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. id: CVE-2024-46627 info: name: DATAGERRY - REST API Auth Bypass author: gy741 severity: critical description: | Incorrect access control in BECN DATAGERRY v2.2 allows attackers...
DATAGERRY - Improper Access Control
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. id: CVE-2024-50967 info: name: DATAGERRY -...
CVE-2024-50967
CVE-2024-50967 DATAGERRY Broken Access Control This vulnerability affects DATAGERRY platform in all versions up to and including 2.2.0 ≤2.2.0...
CVE-2024-46627
CVE-2024-46627 - Controllo di accesso errato in BECN DATAGERRY v2.2 consente agli attaccanti di eseguire comandi arbitrari tramite richieste web appositamente create. DATAGERRY v2.2 non dispone di controllo degli accessi nella REST API per i seguenti endpoint: /rest/users//settings/ GET, POST...
DATAGERRY - REST API Auth Bypass Detection
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. !/usr/bin/env python3 -- coding: utf-8 -- """Incorrect access control in BECN DATAGERRY v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...
DATAGERRY - Improper Access Control Detection
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. !/usr/bin/env python3 -- coding: utf-8 --...
Datagerry Panel - Detect
Datagerry panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Datagerry panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Datagerry Panel - Detect', 'description': 'Datagerry panel...
VulnCheck KEV: CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-46627
Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-50967
Becon DATAGerry versions through 2.2.0 (prior to 2.3) are vulnerable to an Incorrect Access Control vulnerability (CWE-862/CWE-200) affecting the /rest/rights/ REST API endpoint. An unauthenticated remote attacker can access this endpoint, leading to the unauthorized disclosure of sensitive infor...
DATAGerry security vulnerabilities
DATAGerry is an open source CMDB and asset management tool from DATAGerry Open Source. A security vulnerability exists in DATAGerry, which originates from /rest/rights/ contains an incorrect access control vulnerability...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
CVE-2024-50967
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...
PT-2025-2896 · Unknown · Becn Datagerry
Name of the Vulnerable Software and Affected Versions: Becon DATAGerry versions prior to 2.3 Description: The /rest/rights/ REST API endpoint contains an Incorrect Access Control issue, allowing an attacker to remotely access this endpoint without authentication. This leads to the unauthorized...
CVE-2024-50967: Missing Authorization
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information...