CVE-2023-28437

2023-03-2500:15:08

Google

osv.dev

dataease

open source

sql injection

vulnerability

fixed

version 1.18.5

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.8%

JSON

Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing entries. This vulnerability has been fixed in version 1.18.5. There are no known workarounds.

CPENameOperatorVersion
dataeaseeq1.18.0
dataeaseeq1.18.3
dataeaseeq1.9.0
dataeaseeq1.0.0
dataeaseeq1.11.0
dataeaseeq1.2.0
dataeaseeq1.8.0
dataeaseeq1.0.0-rc1
dataeaseeq1.18.4
dataeaseeq1.3.0

Name	Operator	Version
dataease	eq	1.18.0
dataease	eq	1.18.3
dataease	eq	1.9.0
dataease	eq	1.0.0
dataease	eq	1.11.0
dataease	eq	1.2.0
dataease	eq	1.8.0
dataease	eq	1.0.0-rc1
dataease	eq	1.18.4
dataease	eq	1.3.0