PatchTheCVEalldata vulnerabilities and fixes
Recent CVEs affecting alldata, with upgrade or downgrade steps. 7 tracked.
alldata has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-04-02. Highest priority: CVE-2024-27604 (score 55/100).
- CVE-2024-29435 MEDIUM 4.1 DOWNGRADE An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.
- CVE-2024-29434 HIGH 8.3 DOWNGRADE An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traver
- CVE-2024-29433 CRITICAL 9.8 DOWNGRADE A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitr
- CVE-2024-29432 CRITICAL 9.8 DOWNGRADE Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/ma
- CVE-2024-27605 HIGH 7.5 DOWNGRADE Alldata V0.4.6 is vulnerable to Insecure Permissions
- CVE-2024-27604 CRITICAL 9.8 DOWNGRADE Alldata V0.4.6 is vulnerable to Command execution vulnerability
- CVE-2024-27602 CRITICAL 9.1 DOWNGRADE Alldata V0.4.6 is vulnerable to Incorrect Access Control
FAQ
How do I fix alldata vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is alldata being exploited right now?
None of the tracked alldata CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which alldata CVE should I patch first?
CVE-2024-27604 currently ranks highest (55/100): Alldata V0.4.6 is vulnerable to Command execution vulnerability.