Description
DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dataease | dataease | < 2.10.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.dataease:common | < 2.10.1 | 2.10.1 | GHSA-h7mj-m72h-qm8w |