Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-34113

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5469-c5p2-xv5g

Dataease before 1.11.2 allows arbitrary code execution via crafter plugin An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin. Version 1.11.2 contains a patch for the problem.

gitlab/maven/io.dataease/dataease-plugin-common/CVE-2022-34113

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.