CVE-2024-50967

MEDIUM EXPLOITED NUCLEI

Becon DATAGerry <2.2.0 - Info Disclosure

Title source: llm

Description

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.

Exploits (1)

nomisec WRITEUP

by 0xByteHunter · infoleak

https://github.com/0xByteHunter/CVE-2024-50967

View Code ZIP pw:eip

Nuclei Templates (1)

DATAGERRY - Improper Access Control

HIGHVERIFIEDby s4e-io,0xByteHunter

Shodan: http.title:"datagerry"

FOFA: title="datagerry"

References (3)

[Various Sources] https://datagerry.readthedocs.io/en/latest/api/rest/user-management.html#rights

[Various Sources] https://github.com/0xByteHunter/CVE-2024-50967

[Various Sources] https://medium.com/@0xbytehunter/my-first-cve-discovery-of-broken-access-control-in-the-datagerry-platform-7b0404f88a43

Scores

CVSS v3 6.5

EPSS 0.3787

EPSS Percentile 97.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

VulnCheck KEV 2025-06-27

CWE

CWE-862

Status published

Published Jan 17, 2025

Tracked Since Feb 18, 2026