PT-2024-12124

Name of the Vulnerable Software and Affected Versions Trimble TM4Web version 22.2.0 Description The issue allows unauthenticated attackers to access the "/inc/tm ajax.msw?func=UserfromUUID&uuid=" endpoint to retrieve the last registration access code and use this access code to register a valid...