CVE-2025-56816

Datart version 1.0.0-rc.3 is vulnerable to Directory Traversal in its configuration file handling. The application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. Because the software parses this file using SnakeYAML's unsafe load() or loadAs() methods with...