Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
•added 2024/10/11 2:45 p.m.•38 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS7.2AI score0.0059EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/11 2:45 p.m.•50 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS0.0059EPSS
SaveExploits0References2
Rows per page
Query Builder