| Package | Affected versions | Patched versions |
|---|---|---|
| dataease | < 2.10.9 | 2.10.9 |
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free