1 matches found
CVE-2026-50030: Improper Neutralization of Special Elements used in an SQL Command
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL preview exposes DatasetDataApi.previewSql/previewSqlCheck through /de2api/datasetData/previewSql, accepts PreviewSqlDTO.sql, PreviewSqlDTO.datasourceId, and PreviewSqlDTO.isCross, then...
7.1CVSS5.9AI score0.00467EPSS
SaveExploits0References2
20