Skip to content
OpenAdvisories

Package · Maven

io.dataease:common

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-46997

    DataEase's H2 datasource has a remote command execution risk

    DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1.

    dataease dataease io.dataease:common Maven