CVE-2024-29432緊急 9.8Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.
CVE-2024-27605高 7.5Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system.
CVE-2024-27604緊急 9.8Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized.
CVE-2024-27602緊急 9.1Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api…
CVE-2024-29435中 4.1An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.