CVE-2025-10080: Use of Hard-coded Cryptographic Key

A vulnerability has been found in running-elephant Datart up to 1.0.0-rc3. Affected by this issue is the function getTokensecret of the file datart/security/src/main/java/datart/security/util/AESUtil.java of the component API. The manipulation leads to use of hard-coded cryptographic key . The...

CVE-2024-12994

CVE-2024-12994 affects running-elephant Datart 1.0.0-rc3. The vulnerability is in the extractModel function of the File Upload component (in /import): crafting or manipulating the file argument leads to deserialization, enabling remote exploitation. Multiple sources confirm affected version and i...

PT-2024-17856 · Unknown · Running-Elephant Datart

Name of the Vulnerable Software and Affected Versions: running-elephant Datart version 1.0.0-rc3 Description: A critical issue affects the extractModel function of the File Upload component, specifically in the /import file. The manipulation of the file argument leads to deserialization. This iss...

CVE-2024-12994: Deserialization of Untrusted Data

A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file /import of the component File Upload. The manipulation of the argument file leads to deserialization. The attack may be launched remotely...