| Package | Affected versions | Patched versions |
|---|---|---|
| io.dataease:dataease-plugin-common | < 1.11.2 | 1.11.2 |
| dataease | = 1.11.1 |
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin. Version 1.11.2 contains a patch for the problem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free