Alldata
by Alldata
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-27602 | 0.00 | — | 0.00 | Apr 2, 2024 | Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module. | |||
| CVE-2024-29434 | 0.00 | — | 0.01 | Apr 2, 2024 | An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file. | |||
| CVE-2024-29432 | 0.00 | — | 0.00 | Apr 2, 2024 | Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas. | |||
| CVE-2024-29435 | 0.00 | — | 0.00 | Apr 1, 2024 | An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter. | |||
| CVE-2024-29433 | 0.00 | — | 0.00 | Apr 1, 2024 | A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data. |
- CVE-2024-27602Apr 2, 2024risk 0.00cvss —epss 0.00
Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module.
- CVE-2024-29434Apr 2, 2024risk 0.00cvss —epss 0.01
An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file.
- CVE-2024-29432Apr 2, 2024risk 0.00cvss —epss 0.00
Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.
- CVE-2024-29435Apr 1, 2024risk 0.00cvss —epss 0.00
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.
- CVE-2024-29433Apr 1, 2024risk 0.00cvss —epss 0.00
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data.