24 matches found
CVE-2022-34115
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId...
CVE-2022-34115: Unrestricted Upload of File with Dangerous Type
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId...
PT-2022-22012
Name of the Vulnerable Software and Affected Versions Dataease versions 1.11.1 Description The issue is a SQL injection vulnerability that can be exploited via the dataSourceId parameter. This allows an attacker to inject malicious SQL code, potentially leading to unauthorized access or...
CVE-2022-34114: Improper Neutralization of Special Elements used in an SQL Command
Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId...