CVE-2024-29435

An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter...

CVE-2024-29435

An issue in Alldata v0.4.6 allows an attacker to execute arbitrary commands via the processId parameter. This vulnerability stems from the improper neutralization of special elements used in a command. As a workaround, it is recommended to avoid using the processId parameter until a fix is availa...

PT-2024-22895 · Alldata · Alldata

Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: An issue in Alldata allows an attacker to run arbitrary commands via the processId parameter. Recommendations: For Alldata version 0.4.6, avoid using the processId parameter until a fix is available. As a...