CVE-2024-52312
data.all authenticated users can perform restricted operations against DataSets and Environments
Résumé
data.all authenticated users can perform restricted operations against DataSets and Environments
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com