Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-40772 EUVD-2023-60666

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted req…

Published Sep 14, 2026 · Updated Sep 14, 2026 · Assigned by mitre

Vendor: dataease Product: dataease

Description

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.

Affected products

VendorProductAffectedFixed
DataEase DataEase < 1.18.10 1.18.10

References