Dataease: >> Dataease >> 1.11.1 Security Vulnerabilities
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-07-22
Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-07-22
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-07-22
Page 6