| Package | Affected versions | Patched versions |
|---|---|---|
| io.dataease:dataease-plugin-common | < 1.11.2 | 1.11.2 |
| dataease | = 1.11.1 |
An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free