DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1.

AdvisoryWeek Archives


The latest information and archives of advisories.

Highlights

  • The latest information for advisories from major tech companies, including Apple, Microsoft, Red Hat, GitHub, and others.
Listed: