CVE-2023-40771

2023-09-0116:15:08

Google

osv.dev

dataease

sql injection

remote attacker

sensitive information

blacklist function

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.9%

JSON

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function.

CPENameOperatorVersion
dataeaseeq1.18.9
dataeaseeq1.0.0-rc1
dataeaseeq1.18.3
dataeaseeq1.18.6
dataeaseeq1.18.5
dataeaseeq1.18.7
dataeaseeq1.3.0
dataeaseeq1.11.1
dataeaseeq1.18.8
dataeaseeq1.0.0-rc2

Name	Operator	Version
dataease	eq	1.18.9
dataease	eq	1.0.0-rc1
dataease	eq	1.18.3
dataease	eq	1.18.6
dataease	eq	1.18.5
dataease	eq	1.18.7
dataease	eq	1.3.0
dataease	eq	1.11.1
dataease	eq	1.18.8
dataease	eq	1.0.0-rc2