← All advisories

Critical severity9.8NVD Advisory· Published Apr 2, 2024· Updated Jun 17, 2026

CVE-2024-29432

CVE-2024-29432

Description

Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Alldata/Alldata2 versions
cpe:2.3:a:alldata:alldata:0.4.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:alldata:alldata:0.4.6:*:*:*:*:*:*:*
- (no CPE)range: <0.4.6
Alldata/Alldatadescription

Patches

Vulnerability mechanics

References

2

gist.github.com/Raybye/4b377eb06b5f9c324f090d39a0d25c2bnvdThird Party Advisory
github.com/Raybye/alldata-bug/blob/main/alldata.mdnvdBroken Link

News mentions

0

No linked articles in our index yet.