PatchTheCVEdata.all vulnerabilities and fixes
Recent CVEs affecting data.all, with upgrade or downgrade steps. 5 tracked.
Also searched as: data all, dataall.
data.all has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-11-09. Highest priority: CVE-2024-52311 (score 37/100).
- CVE-2024-52314 MEDIUM 4.9 UPGRADE A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may b
- CVE-2024-52313 MEDIUM 4.3 UPGRADE An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regard
- CVE-2024-52312 MEDIUM 5.4 UPGRADE Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated acco
- CVE-2024-52311 MEDIUM 6.3 UPGRADE Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously a
- CVE-2024-10953 MEDIUM 4.3 UPGRADE An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records
FAQ
How do I fix data.all vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is data.all being exploited right now?
None of the tracked data.all CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which data.all CVE should I patch first?
CVE-2024-52311 currently ranks highest (37/100): Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously a.