Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-34115

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-vjmr-6pmm-rprf

Dataease v1.11.1 SQL Injection via parameter dataSourceId Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter `dataSourceId`. Version 1.11.2 contains a fix.

gitlab/maven/io.dataease/dataease-plugin-common/CVE-2022-34115

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.