CVE-2024-27605

Description

References

• gist.github.com/Raybye/f365c89115f80e81d209f2fca9490339 · Third Party Advisory

Más vulnerabilidades de alldata

• CVE-2024-29434ALTO 8.3An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file.
• CVE-2024-29432CRÍTICO 9.8Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.
• CVE-2024-27604CRÍTICO 9.8Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized.
• CVE-2024-27602CRÍTICO 9.1Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api…
• CVE-2024-29435MEDIO 4.1An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.