← Database

CVE-2024-52312

MEDIUM CVSS: 5.4 Published: 2024-11-09 Modified: 2026-06-17

Description

Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.

Affected Platforms

Amazon Data.All

Weakness Type

CWE-863

References