CVE-2024-28029

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.

More information : https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12