critical9.1
CVE-2024-27602
Alldata V0.4.6 is vulnerable to Incorrect Access Control.
Impact
Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alldata | Alldata | Version 0.4.6 |