Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
added 2026/04/16 7:48 p.m.8 views

CVE-2026-40899 DataEase has an Arbitrary File Read Vulnerability

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerability in the MySQL datasource configuration. The Mysql class uses Lombok's @Data annotation, which auto-generates a public setter for the...

8.3CVSS5.8AI score0.00388EPSS
SaveExploits2References2
OSV
OSV
added 2026/04/16 7:48 p.m.12 views

CVE-2026-40899 DataEase has an Arbitrary File Read Vulnerability

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerability in the MySQL datasource configuration. The Mysql class uses Lombok's @Data annotation, which auto-generates a public setter for the...

8.3CVSS6AI score
SaveExploits0References4
CVE
CVE
added 2026/04/16 7:48 p.m.33 views

CVE-2026-40899

DataEase

8.3CVSS5.9AI score0.00388EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder