Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the assetPredictedDatapointService.updateValues process. An attacker can modify predicted datapoints for assets by sending write requests to the predicted datapoint endpoint using only read-level privileges...