medium4.3
CVE-2024-10953
An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their u…
Impact
An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Data.All | from 1.0.0 before 2.6.1 |