Lucene search
+L

5 matches found

OSV
OSV
added 2026/03/20 3:27 a.m.18 views

CVE-2026-32939 DataEase is Vulnerable to H2 JDBC RCE Bypass

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

7.7CVSS5.8AI score
SaveExploits0References5
Rows per page
Query Builder