Miembros de
Boletines de Vulnerabilidades |
Issue with data.all (Multiple CVEs) |
|
| Software afectado | AmazonWS |
|
Publication Date: 2024/11/8 4:00 PM PDT Data.all is an open source development framework to help customers build a data marketplace on AWS. We have identified the following issues within data.all version 1.0.0 through 2.6.0. On November 8, 2024, we released a fix and recommend customers upgrade to version 2.6.1 or later and ensure any forked or derivative code are patched to incorporate the new fixes. CVE-2024-52311 relates to an issue where data.all does not invalidate authentication token More info: https://aws.amazon.com/security/security-bulletins/AWS-2024-013/ |
|
