Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2024/10/11 2:45 p.m.32 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS7.2AI score0.00585EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/11 2:45 p.m.41 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS0.00585EPSS
SaveExploits0References2
Rows per page
Query Builder