dataease - CVE CyberSecurity Database News

Sep 1, 2023 API SQL dataease

CVE-2023-40771 - SQL Injection in DataEase v1.18.9 – How Attackers Steal Your Database

If you use DataEase, pay close attention. The SQL injection vulnerability tagged as CVE-2023-40771 affects DataEase version 1.18.9. In this post, I’ll

CVE-2023-37258 - SQL Injection in DataEase (Pre-1.18.9) Allows Attackers to Bypass Blacklists

Jul 25, 2023 Exploit SQL dataease

CVE-2023-37258 - SQL Injection in DataEase (Pre-1.18.9) Allows Attackers to Bypass Blacklists

If you’re using DataEase as your open-source data visualization tool, you need to know about CVE-2023-37258. This nasty SQL injection bug exposed a big

CVE-2023-37257 - DataEase Stored XSS Vulnerability Explained – Code Example, Exploit, and How to Stay Safe

Jul 25, 2023 XSS API dataease

CVE-2023-37257 - DataEase Stored XSS Vulnerability Explained – Code Example, Exploit, and How to Stay Safe

Published: 2024-06-20 *Author: Security Insights Team* What is CVE-2023-37257? CVE-2023-37257 is a stored cross-site scripting (XSS) vulnerability found in DataEase, an open-source data visualization and

Oct 25, 2022 RCE Java dataease

CVE-2022-39312 - DataEase Deserialization Vulnerability – How Attackers Can Get System Access via Malicious MySQL Connections

DataEase is an open source data visualization and analysis platform widely used for exploring and sharing data insights. If your organization uses DataEase and hasn’