Skip to content
OpenAdvisories

Package · Maven

io.dataease:dataease-plugin-common

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-40771

    DataEase vulnerable to SQL injection

    SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function.

    io.dataease:dataease-plugin-common Maven
  • High 8.1
    CVE-2023-32310

    DataEase API interface has IDOR vulnerability

    DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's dashboar…

    dataease dataease io.dataease:dataease-plugin-common Maven
  • High 8.8
    CVE-2022-34114

    SQL Injection found in Dataease

    Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.

    io.dataease:dataease-plugin-common Maven