CVE-2024-23328
Assigner: GitHub_M
Published: 2024-02-01T15:40:24.236Z
State: PUBLISHED
title: The Dataease datasource exists deserialization and arbitrary file read vulnerability
problemTypes: descriptions: cweId: CWE-502
description: CWE-502: Deserialization of Untrusted Data
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
affected: vendor: dataease
product: dataease
versions: version: < 1.18.15
status: affected
version: >= 2.0.0, < 2.3.0
status: affected
descriptions: value: Dataease is an open source data visualization analysis tool. A deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The location of the vulnerability code is `core/core-backend/src/main/java/io/dataease/datasource/type/Mysql.java.` The blacklist of mysql jdbc attacks can be bypassed and attackers can further exploit it for deserialized execution or reading arbitrary files. This vulnerability is patched in 1.18.15 and 2.3.0.
source: advisory: GHSA-8x8q-p622-jf25
discovery: UNKNOWN