Dataease@1.11.1 Security Vulnerabilities and Issues — Dataease@1.11.1 CVE List

Lucene search

Dataease ProjectDataease1.11.1

3 matches found

CVE•added 2022/07/22 11:15 p.m.•419 views

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.

6.5CVSS6.3AI score0.0006EPSS

CVE•added 2022/07/22 11:15 p.m.•63 views

CVE-2022-34114

Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.

8.8CVSS9AI score0.00076EPSS

CVE•added 2022/07/22 11:15 p.m.•56 views

CVE-2022-34115

DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.

9.8CVSS9.6AI score0.0012EPSS