CVE-2023-33963

DataEase (open source data visualization/analysis tool) contains a deserialization vulnerability in the DataEase datasource prior to version 1.18.7 that allows arbitrary code execution. The issue is fixed in v1.18.7; there are no known workarounds other than upgrading. CVSS metrics indicate a CRI...