Data.all (Amazon) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2024-11-09. Vendor: Amazon.

CVEs of Data.all

• CVE-2024-52314 - CVSS 6.9 (medium), 2024-11-09: A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able to extract user data from data.all…
• CVE-2024-52313 - CVSS 5.3 (medium), 2024-11-09: An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the…
• CVE-2024-52311 - CVSS 6.3 (medium), 2024-11-09: Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of…
• CVE-2024-52312 - CVSS 5.4 (medium), 2024-11-09: Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against…
• CVE-2024-10953 - CVSS 5.3 (medium), 2024-11-09: An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their…