CVE-2022-23331

In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password...

CVE-2022-23331

In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password...

CVE-2022-23331

Summary: DataEase v1.6.1 contains an access-control vulnerability that allows an authenticated user to access all user information and to change the administrator password. The issue is described as an access control error in DataEase; no details about a patch are provided in the connected docume...