Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-34112

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c2pj-rr68-pw94

Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue.

gitlab/maven/io.dataease/dataease-plugin-common/CVE-2022-34112

Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.