CVE-2024-9984

Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user’s session cookie.

More information : https://www.twcert.org.tw/en/cp-139-8151-1a4b5-2.html