CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-46627

BECN DATAGERRY v2.2 is vulnerable to an incorrect access control flaw that allows an unauthenticated attacker to execute arbitrary commands via crafted web requests. Specifically, the REST API lacks access control for the following endpoints: /rest/users//settings/ (GET, POST) and /rest/users//se...