Critical · 9.8 CVE-2022-34113 EUVD-2022-6235GHSA-5469-c5p2-xv5g

Dataease before 1.11.2 allows arbitrary code execution via crafter plugin

Published Jul 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.

Ecosystem	Package	Affected	Fixed	Record
Maven	io.dataease:dataease-plugin-common	< 1.11.2	1.11.2	GHSA-5469-c5p2-xv5g