2024-04-03 08:03:23 +00:00
{
"id" : "CVE-2024-29432" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-04-02T21:15:46.117" ,
2024-04-03 14:03:40 +00:00
"lastModified" : "2024-04-03T12:38:04.840" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-04-03 08:03:23 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas."
2024-04-03 14:03:40 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se descubri\u00f3 que Alldata v0.4.6 contiene una vulnerabilidad de inyecci\u00f3n SQL a trav\u00e9s del par\u00e1metro nombre de tabla en /data/masterdata/datas."
2024-04-03 08:03:23 +00:00
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://gist.github.com/Raybye/4b377eb06b5f9c324f090d39a0d25c2b" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://github.com/Raybye/alldata-bug/blob/main/alldata.md" ,
"source" : "cve@mitre.org"
}
]
}