Medium severity4.9NVD Advisory· Published Nov 9, 2024· Updated Jun 17, 2026

CVE-2024-52314

Description

A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able to extract user data from data.all application logs in data.all via CloudWatch log scanning for particular operations that interact with customer producer teams data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

data.all/data.allllm-fuzzy
amazon/data.allv5
Range: 1.0.0

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/AWS-2024-013nvdVendor Advisory
github.com/data-dot-all/dataall/security/advisories/GHSA-p2h8-r28g-5q6hnvdVendor Advisory
github.com/data-dot-all/dataall/releases/tag/v2.6.1nvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000