PT-2024-23091 · Datalust · Datalust Seq

Published 2024-03-21 · Updated 2025-06-17 · CVE-2024-29866

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Datalust Seq versions before 2023.4.11151 Datalust Seq version 2024 before 2024.1.11146

Description The issue is related to Incorrect Access Control, where a Project Owner or Organization Owner can escalate to System privileges. This can be exploited through a local network attack vector. There is no current exploit available, but immediate action is recommended to secure the system.

Recommendations For Datalust Seq versions before 2023.4.11151, upgrade to version 2023.4.11151 or later. For Datalust Seq version 2024 before 2024.1.11146, upgrade to version 2024.1.11146 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-29866

Affected Products

Datalust Seq

References · 8

• https://osv.dev/vulnerability/CVE-2024-29866 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29866 · Security Note
• https://github.com/datalust/seq-tickets/issues/2127 · Note
• https://datalust.co · Note
• https://twitter.com/oktsec/status/1771900220416111001 · Twitter Post
• https://t.me/cvenotify/74328 · Telegram Post
• https://twitter.com/CVEnew/status/1770810919393628163 · Twitter Post
• https://t.me/cvenotify/125927 · Telegram Post