Dataease

Dataease

50 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-40183

Exploit
  • EPSS 0.1%
  • Published 21.09.2023 15:15:10
  • Last modified 21.11.2024 08:18:57

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to obtain user cookies. The program only uses the `ImageIO.read()` method to determine whether the file...

7.5

CVE-2023-40771

Exploit
  • EPSS 0.15%
  • Published 01.09.2023 16:15:08
  • Last modified 21.11.2024 08:20:06

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function.

9.8

CVE-2023-37258

Exploit
  • EPSS 0.19%
  • Published 25.07.2023 20:15:13
  • Last modified 21.11.2024 08:11:19

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can bypass blacklists. The vulnerability has been fixed in v1.18.9. There are no known workarounds.

5.4

CVE-2023-37257

Exploit
  • EPSS 0.45%
  • Published 25.07.2023 20:15:13
  • Last modified 21.11.2024 08:11:19

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripting vulnerability. The vulnerability has been fixed in v1.18.9. There are no known workarounds.

6.5

CVE-2023-35164

Exploit
  • EPSS 0.06%
  • Published 26.06.2023 22:15:11
  • Last modified 21.11.2024 08:08:04

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing authorization check allows unauthorized users to manipulate a dashboard created by the administrator. Th...

8.1

CVE-2023-34463

Exploit
  • EPSS 0.13%
  • Published 26.06.2023 21:15:09
  • Last modified 21.11.2024 08:07:18

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized users can delete an application erroneously. This vulnerability has been fixed in version 1.18.8. Use...

6.5

CVE-2023-35168

Exploit
  • EPSS 0.06%
  • Published 26.06.2023 21:15:09
  • Last modified 21.11.2024 08:08:04

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. Affected versions of DataEase has a privilege bypass vulnerability where ordinary users can gain access to the user database. Exposed i...

9.8

CVE-2023-33963

Exploit
  • EPSS 1.6%
  • Published 01.06.2023 16:15:09
  • Last modified 21.11.2024 08:06:18

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7...

8.1

CVE-2023-32310

Exploit
  • EPSS 0.15%
  • Published 01.06.2023 16:15:09
  • Last modified 21.11.2024 08:03:05

DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's...

8.8

CVE-2023-28637

Exploit
  • EPSS 2.26%
  • Published 28.03.2023 21:15:11
  • Last modified 21.11.2024 07:55:42

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may ...