CVE-2023-36467

AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data.all versions 1.2.0 through 1.5.1 do not prevent remote code execution when a user injects Python commands into the ‘Template’ field when configuring a data pipeline. The issue can only be triggered by authenticated users. A fix for this issue is available in data.all version 1.5.2 and later. There is no recommended work around.

• CWE-94

• https://github.com/awslabs/aws-dataall/pull/472Patch
• https://github.com/awslabs/aws-dataall/releases/tag/v1.5.2Release Notes
• https://github.com/awslabs/aws-dataall/releases/tag/v1.5.4Release Notes
• https://github.com/awslabs/aws-dataall/security/advisories/GHSA-m922-chh7-8qcrVendor Advisory
• https://github.com/awslabs/aws-dataall/pull/472Patch
• https://github.com/awslabs/aws-dataall/releases/tag/v1.5.2Release Notes
• https://github.com/awslabs/aws-dataall/releases/tag/v1.5.4Release Notes
• https://github.com/awslabs/aws-dataall/security/advisories/GHSA-m922-chh7-8qcrVendor Advisory

Published

Jun 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36461Mastodon is a free, open-source social network server based …7.5
• CVE-2023-36462Mastodon is a free, open-source social network server based …5.4
• CVE-2023-36463Meldekarten generator is an open source project to create a …6.1
• CVE-2023-36464pypdf is an open source, pure-python PDF library. In affecte…5.5
• CVE-2023-36465Decidim is a participatory democracy framework, written in R…7.1
• CVE-2023-36466Discourse is an open source discussion platform. When editin…4.3
• CVE-2023-36468XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-36469XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-3647The IURNY by INDIGITALL WordPress plugin before 3.2.3 does n…4.8
• CVE-2023-36470XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-36471Xwiki commons is the common modules used by other XWiki top …5.4
• CVE-2023-36472Strapi is an open-source headless content management system.…5.7