GCVE - cpe:2.3:a:alldata:alldata:0.4.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:alldata:alldata:0.4.6:*:*:*:*:*:*:*

part: a version: 0.4.6 update: *

Vendor	Alldata (`4f44625a-4994-5200-ab05-dab48e739e4a`)
Product	Alldata (`d66984eb-08e5-5537-8383-9c486e864982`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/alldatacenter/alldata`	purl2cpe	2026-06-01 10:15:55.494099

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-29435`	vulnerable	2026-06-08 06:33:29.152656	Details available An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter. Published: 2024-04-01T00:00:00.000Z Updated: 2024-09-04T16:02:47.623Z Open on db.gcve.eu Reference links https://gist.github.com/Raybye/ea3a46adc5ea51e659c42218f05153fa	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29434`	vulnerable	2026-06-08 06:33:29.152169	Details available An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file. Published: 2024-04-02T00:00:00.000Z Updated: 2025-03-28T23:38:55.948Z Open on db.gcve.eu Reference links https://github.com/Raybye/alldata-bug/blob/main/alldata.md https://gist.github.com/Raybye/6cf4aa273e12a220056e38bec764d42d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29433`	vulnerable	2026-06-08 06:33:29.151638	Details available A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data. Published: 2024-04-01T00:00:00.000Z Updated: 2024-09-04T15:57:51.349Z Open on db.gcve.eu Reference links https://gist.github.com/Raybye/496a871c66715a531750d58651d2b5c4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29432`	vulnerable	2026-06-08 06:33:29.151060	Details available Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas. Published: 2024-04-02T00:00:00.000Z Updated: 2024-09-04T16:04:34.416Z Open on db.gcve.eu Reference links https://github.com/Raybye/alldata-bug/blob/main/alldata.md https://gist.github.com/Raybye/4b377eb06b5f9c324f090d39a0d25c2b	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27605`	vulnerable	2026-06-08 06:31:29.064287	Details available Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system. Published: 2024-04-02T00:00:00.000Z Updated: 2025-03-28T18:25:43.563Z Open on db.gcve.eu Reference links https://gist.github.com/Raybye/f365c89115f80e81d209f2fca9490339	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27604`	vulnerable	2026-06-08 06:31:29.063954	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27602`	vulnerable	2026-06-08 06:31:29.063353	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.