Skip to content
OpenAdvisories

Package · Maven

io.dataease:dataease-plugin-common

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin

    An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.