DataEase vulnerable to SQL injection

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-40771 · ADVISORY
• dataease/dataease · WEB
• dataease/dataease · PACKAGE

Lỗ hổng khác của io.dataease:dataease-plugin-common

• CVE-2023-32310CAO 8.1DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages …
• CVE-2022-39312NGHIÊM TRỌNG 9.8Dataease is an open source data visualization analysis tool. Dataease prior to 1.15.2 has a deserialization vulnerability. In Dataease, the …
• CVE-2022-34115NGHIÊM TRỌNG 9.8DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.
• CVE-2022-34114CAO 8.8Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.
• CVE-2022-34113NGHIÊM TRỌNG 9.8An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.