CVE-2023-35164

2023-06-2622:15:11

Google

osv.dev

dataease

open source

visualization

dashboard manipulation

authorization check

upgrade

vulnerability

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing authorization check allows unauthorized users to manipulate a dashboard created by the administrator. This vulnerability has been fixed in version 1.18.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CPENameOperatorVersion
dataeaseeq1.0.0-rc1
dataeaseeq1.18.3
dataeaseeq1.18.6
dataeaseeq1.18.5
dataeaseeq1.18.7
dataeaseeq1.3.0
dataeaseeq1.11.1
dataeaseeq1.0.0-rc2
dataeaseeq1.11.0
dataeaseeq1.6.0

Name	Operator	Version
dataease	eq	1.0.0-rc1
dataease	eq	1.18.3
dataease	eq	1.18.6
dataease	eq	1.18.5
dataease	eq	1.18.7
dataease	eq	1.3.0
dataease	eq	1.11.1
dataease	eq	1.0.0-rc2
dataease	eq	1.11.0
dataease	eq	1.6.0