PT-2022-22010

Name of the Vulnerable Software and Affected Versions Dataease version 1.11.1 Description An access control issue in the component "/api/plugin/uninstall" allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Recommendations For Dataease version...

CVE-2022-34112: Incorrect Permission Assignment for Critical Resource

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2010-1621

The mysqluninstallplugin function in sql/sqlplugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command...