SQL Injection

dataease-plugin-common is vulnerable to SQL Injection. The vulnerability exists through the PluginGridSql.xml due to the lack of query validation, allowing an attacker to gain sensitive information via a maliciously crafted string outside the blacklist function...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.18.9), io.dataease:dataease-plugin-interface (>=1.0, <=1.18.9) +1 more potentially affected by CVE-2023-40771 via io.dataease:dataease-plugin-common (>=1.0, <=1.18.9)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.18.9 Source cves: CVE-2023-40771 Source advisory: GHSA-8RV7-G772-PP3J...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.15.0), io.dataease:dataease-plugin-interface (>=1.0, <=1.15.0) +1 more potentially affected by CVE-2022-39312 via io.dataease:dataease-plugin-common (>=1.0, <=1.15.0)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.15.0 Source cves: CVE-2022-39312 Source advisory: GHSA-Q4QQ-JHJV-7RH2...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.11.1), io.dataease:dataease-plugin-interface (>=1.0, <=1.11.1) +1 more potentially affected by CVE-2022-34113 via io.dataease:dataease-plugin-common (>=1.0, <=1.11.1)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.11.1 Source cves: CVE-2022-34113 Source advisory: OSV:GHSA-5469-C5P2-XV5G...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.11.1), io.dataease:dataease-plugin-interface (>=1.0, <=1.11.1) +1 more potentially affected by CVE-2022-34114 via io.dataease:dataease-plugin-common (>=1.0, <=1.11.1)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.11.1 Source cves: CVE-2022-34114 Source advisory: GHSA-HMVW-66JM-H9FH...