Description
Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.dataease:dataease-plugin-common | < 1.11.2 | 1.11.2 | GHSA-hmvw-66jm-h9fh |