CVE-2024-56898

The exploit demonstrates a broken access control vulnerability in GeoVision GV-ASManager, allowing low-privilege users to escalate privileges by creating or modifying accounts via a crafted POST request to the ASWebCommon.srf endpoint.

This repository documents CVE-2024-56898, a broken access control vulnerability in Geovision GV-ASManager v6.1.0.0 or lower, allowing low-privilege users (e.g., Guest) to escalate privileges, create/modify accounts, and perform unauthorized actions. The writeup includes detailed steps and screenshots demonstrating the exploit.