CVE-2023-37258

CRITICAL 9.8CVE-2023-37258 · Published 25/07/2023 · updated 17/06/2026

In short

CVE-2023-37258 is a CRITICAL (CVSS 9.8) vulnerability affecting dataease (dataease).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.9% of all vulnerabilities.
Fix: update to 1.18.9 or later.

Package	Affected versions	Patched versions
dataease dataease	`< 1.18.9`	`1.18.9`

Description

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can bypass blacklists. The vulnerability has been fixed in v1.18.9. There are no known workarounds.

References

dataease/dataease · Product
dataease/dataease · Product
dataease/dataease security advisory · Exploit

More vulnerabilities in dataease

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dataease

< 1.18.9

1.18.9

More vulnerabilities in dataease

See all →