Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-52312

data.all authenticated users can perform restricted operations against DataSets and Environments

Description

Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

amazon data.all

Default version status: unaffected

  • 1.0.0 to ≤ 2.6.0affected

References