CVE-2022-23331

Summary: DataEase v1.6.1 contains an access-control vulnerability that allows an authenticated user to access all user information and to change the administrator password. The issue is described as an access control error in DataEase; no details about a patch are provided in the connected docume...

CVE-2022-23331

In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool. An access control error vulnerability exists in DataEase, which stems from the fact that the product allows authorized users to access all user information and change administrator passwords. No details of the vulnerability are...

PT-2022-15935 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase version 1.6.1 Description: The issue allows an authenticated user to gain unauthorized access to all user information and change the administrator password. Recommendations: For DataEase version 1.6.1, at the moment, there is no...