CVE-2024-28029 — Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.
Published: 2024-03-21 · CVSS: 8.8 · CVSS 3.1
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7