CVE-2026-123990

DataEase versions up to 2.10.27/3.1.0 are vulnerable to SQL injection within the Chart Data Handler component. The vulnerability exists in the extWhere2sqlOjb function of the engine/trans/ExtWhere2Str.java file, where improper handling of the argument operator allows for remote exploitation. To m...