CVE-2023-33963

2023-06-0116:15:09

Google

osv.dev

dataease

deserialization vulnerability

arbitrary code

datasource

upgrade

7.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

JSON

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.

CPENameOperatorVersion
dataeaseeq1.8.0
dataeaseeq1.18.5
dataeaseeq1.18.3
dataeaseeq1.18.2
dataeaseeq1.11.1
dataeaseeq1.0.0
dataeaseeq1.3.0
dataeaseeq1.18.1
dataeaseeq1.9.0
dataeaseeq1.11.0

Name	Operator	Version
dataease	eq	1.8.0
dataease	eq	1.18.5
dataease	eq	1.18.3
dataease	eq	1.18.2
dataease	eq	1.11.1
dataease	eq	1.0.0
dataease	eq	1.3.0
dataease	eq	1.18.1
dataease	eq	1.9.0
dataease	eq	1.11.0