Executive brief
DataEase vulnerable to SQL injection
Affected products
- Maven io.dataease:dataease-plugin-common
Junglewise Threat Intelligence
CVE-2023-40771: DataEase vulnerable to SQL injection
CVE-2023-40771 · Severity: low · CVSS 3.1 · Published 2023-09-01
Technologies: io.dataease:dataease-plugin-common (Maven). Vendors: Maven.
Related threats
- DataEase API interface has IDOR vulnerability
- MySQL JDBC deserialization vulnerability
- Dataease v1.11.1 SQL Injection via parameter dataSourceId
- Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
- Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin