CVE-2024-29432

Mô tả

Tham khảo

• gist.github.com/Raybye/4b377eb06b5f9c324f090d39a0d25c2b · Third Party Advisory
• Raybye/alldata-bug · Broken Link

Lỗ hổng khác của alldata

• CVE-2024-29434CAO 8.3An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file.
• CVE-2024-27605CAO 7.5Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system.
• CVE-2024-27604NGHIÊM TRỌNG 9.8Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized.
• CVE-2024-27602NGHIÊM TRỌNG 9.1Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api…
• CVE-2024-29435TRUNG BÌNH 4.1An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.