Vendor
DataCap versions 2025.1.1 and earlier are vulnerable to a missing authorization flaw that allows authenticated users to escalate privileges via administrative API calls.