SQL Injection

io.dataease, dataease-plugin-common is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the dataSourceId parameter, which allows an attacker to inject and execute arbitrary SQL queries...

SQL Injection

dataease-plugin-common is vulnerable to SQL Injection. The vulnerability exists through the PluginGridSql.xml due to the lack of query validation, allowing an attacker to gain sensitive information via a maliciously crafted string outside the blacklist function...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.18.9), io.dataease:dataease-plugin-interface (>=1.0, <=1.18.9) +1 more potentially affected by CVE-2023-40771 via io.dataease:dataease-plugin-common (>=1.0, <=1.18.9)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.18.9 Source cves: CVE-2023-40771 Source advisory: GHSA-8RV7-G772-PP3J...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.15.0), io.dataease:dataease-plugin-interface (>=1.0, <=1.15.0) +1 more potentially affected by CVE-2022-39312 via io.dataease:dataease-plugin-common (>=1.0, <=1.15.0)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.15.0 Source cves: CVE-2022-39312 Source advisory: GHSA-Q4QQ-JHJV-7RH2...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.11.1), io.dataease:dataease-plugin-interface (>=1.0, <=1.11.1) +1 more potentially affected by CVE-2022-34113 via io.dataease:dataease-plugin-common (>=1.0, <=1.11.1)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.11.1 Source cves: CVE-2022-34113 Source advisory: OSV:GHSA-5469-C5P2-XV5G...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.11.1), io.dataease:dataease-plugin-interface (>=1.0, <=1.11.1) +1 more potentially affected by CVE-2022-34114 via io.dataease:dataease-plugin-common (>=1.0, <=1.11.1)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.11.1 Source cves: CVE-2022-34114 Source advisory: GHSA-HMVW-66JM-H9FH...