CVE-2024-52312
data.all authenticated users can perform restricted operations against DataSets and Environments
Summary
data.all authenticated users can perform restricted operations against DataSets and Environments
Original description
The description as published by the source.
Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com