CyberSecBulletin

Alldata vulnerabilities

We track 2 vulnerabilities in Alldata products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2024.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest Alldata vulnerabilities

  • 9.1 Critical severity

    alldata: Improper Access Control

    CVE-2024-27602Alldata

    Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module.

  • 9.8 Critical severity

    alldata: Deserialization of Untrusted Data

    CVE-2024-29433Alldata

    A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data.