Skip to content
OpenAdvisories

Package · Maven

io.dataease:dataease-plugin-common

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-39312

    Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

    Dataease is an open source data visualization analysis tool. Dataease prior to 1.15.2 has a deserialization vulnerability. In Dataease, the Mysql data source in the data source function can customize the JDBC connection parameters and the Mysql server target …

    dataease dataease io.dataease:dataease-plugin-common Maven
  • Critical 9.8
    CVE-2022-34113

    Dataease before 1.11.2 allows arbitrary code execution via crafter plugin

    An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.

    io.dataease:dataease-plugin-common Maven
  • Critical 9.8
    CVE-2022-34115

    Dataease v1.11.1 SQL Injection via parameter dataSourceId

    DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.

    io.dataease:dataease-plugin-common Maven