Executive brief
MySQL JDBC deserialization vulnerability
Affected products
- Maven io.dataease:dataease-plugin-common
Junglewise Threat Intelligence
CVE-2022-39312: MySQL JDBC deserialization vulnerability
CVE-2022-39312 · Severity: low · CVSS 3.1 · Published 2022-10-18
Technologies: io.dataease:dataease-plugin-common (Maven). Vendors: Maven.
Related threats
- DataEase vulnerable to SQL injection
- DataEase API interface has IDOR vulnerability
- Dataease v1.11.1 SQL Injection via parameter dataSourceId
- Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
- Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin