CVE-2024-52313

An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by directly querying the object via getEnvironment in data.all...

CVE-2024-52313: Authorization Bypass Through User-Controlled Key

An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by directly querying the object via getEnvironment in data.all...

PT-2024-35173

Name of the Vulnerable Software and Affected Versions Amazon data.all versions =2.6.0 Description An authenticated data.all user can manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not be able to fetch by direct...