Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2023/09/21 2:21 p.m.38 views

CVE-2023-40183 DataEase has a vulnerability to obtain user cookies

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to obtain user cookies. The program only uses the ImageIO.read method to determine whether the file is an image file or not. There is no whitelisting...

7.5CVSS7.7AI score0.00636EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/09/21 2:21 p.m.27 views

CVE-2023-40183 DataEase has a vulnerability to obtain user cookies

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to obtain user cookies. The program only uses the ImageIO.read method to determine whether the file is an image file or not. There is no whitelisting...

7.5CVSS6.8AI score0.00636EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/21 2:21 p.m.29 views

CVE-2023-40183 DataEase has a vulnerability to obtain user cookies

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to obtain user cookies. The program only uses the ImageIO.read method to determine whether the file is an image file or not. There is no whitelisting...

7.5CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder