4 matches found
CVE-2022-34113
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin...
9.8CVSS7.7AI score0.01286EPSS
SaveExploits1References1
CVE-2022-34113
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin...
9.8CVSS0.01286EPSS
SaveExploits1References1
CVE-2022-34113
CVE-2022-34113 affects DataEase v1.11.1, where the vulnerable component is the /api/plugin/upload endpoint. A crafted plugin can lead to arbitrary code execution on the server due to improper handling in the upload workflow. Remediation: upgrade to DataEase v1.11.2, which contains a patch address...
9.8CVSS9.5AI score0.01286EPSS
SaveExploits1References1Affected Software1
20