Lucene search
GoogleOSV:CVE-2023-28637HistoryMar 28, 2023 - 9:15 p.m.
CVE-2023-28637
2023-03-2821:15:11
Google
osv.dev
4
dataease
open source
data visualization
aws redshift
data sanitization
remote code execution
vulnerability
upgrade
DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerability has been fixed in v1.18.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Related
cve
cve
CVE-2023-28637
2023-03-28 21:15:11
prion
prion
Remote code execution
2023-03-28 21:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-28637
2023-03-28 21:15:11