CVE-2024-29432: Alldata

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.

Affected products

• Alldata Alldata: version 0.4.6 only

Published 2024-04-02. Last modified 2026-06-17.