A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/Raybye/496a871c66715a531750d58651d2b5c4 | Third Party Advisory |
| https://gist.github.com/Raybye/496a871c66715a531750d58651d2b5c4 | Third Party Advisory |
Configurations
History
07 May 2025, 00:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/Raybye/496a871c66715a531750d58651d2b5c4 - Third Party Advisory | |
| First Time |
Alldata alldata
Alldata |
|
| CPE | cpe:2.3:a:alldata:alldata:0.4.6:*:*:*:*:*:*:* |
01 Apr 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-01 20:15
Updated : 2025-05-07 00:36
NVD link : CVE-2024-29433
Mitre link : CVE-2024-29433
JSON object : View
Products Affected
alldata
- alldata
CWE
No CWE.