Medium severity6.3NVD Advisory· Published Nov 9, 2024· Updated Jun 17, 2026

CVE-2024-52311

Description

Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of authorized API Requests until token is expired.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

data.all/data.allllm-fuzzy
amazon/data.allv5
Range: 1.0.0

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/AWS-2024-013nvdVendor Advisory
github.com/data-dot-all/dataall/security/advisories/GHSA-p69m-h9rw-584vnvdVendor Advisory
github.com/data-dot-all/dataall/releases/tag/v2.6.1nvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000