CVE-2023-40183

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to obtain user cookies. The program only uses the "ImageIO.read" method to determine whether the file is an image file or not. There is no whitelistin...