Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/io.dataease/dataease-plugin-common@1.11.1
Typemaven
Namespaceio.dataease
Namedataease-plugin-common
Version1.11.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.18.10
Latest_non_vulnerable_version1.18.10
Affected_by_vulnerabilities
0
url VCID-4ske-gjf5-1uge
vulnerability_id VCID-4ske-gjf5-1uge
summary Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34112
reference_id
reference_type
scores
0
value 0.00146
scoring_system epss
scoring_elements 0.34735
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34112
1
reference_url https://github.com/dataease/dataease
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease
2
reference_url https://github.com/dataease/dataease/commit/5f611d3e3934816e9ad34e3d21807978001e2c8b
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/commit/5f611d3e3934816e9ad34e3d21807978001e2c8b
3
reference_url https://github.com/dataease/dataease/issues/2429
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/issues/2429
4
reference_url https://github.com/dataease/dataease/releases/tag/v1.11.2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/releases/tag/v1.11.2
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-34112
reference_id CVE-2022-34112
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-34112
6
reference_url https://github.com/advisories/GHSA-c2pj-rr68-pw94
reference_id GHSA-c2pj-rr68-pw94
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c2pj-rr68-pw94
fixed_packages
0
url pkg:maven/io.dataease/dataease-plugin-common@1.11.2
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.2
1
url pkg:maven/io.dataease/dataease-plugin-common@1.11.3
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tmn-f9w4-nqcv
1
vulnerability VCID-hmvg-g1qt-kkgn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.3
aliases CVE-2022-34112, GHSA-c2pj-rr68-pw94
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4ske-gjf5-1uge
1
url VCID-4tmn-f9w4-nqcv
vulnerability_id VCID-4tmn-f9w4-nqcv
summary SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-40771
reference_id
reference_type
scores
0
value 0.00192
scoring_system epss
scoring_elements 0.40989
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-40771
1
reference_url https://github.com/dataease/dataease
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-40771
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-40771
3
reference_url https://github.com/dataease/dataease/issues/5861
reference_id 5861
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-01T14:24:21Z/
url https://github.com/dataease/dataease/issues/5861
4
reference_url https://github.com/advisories/GHSA-8rv7-g772-pp3j
reference_id GHSA-8rv7-g772-pp3j
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8rv7-g772-pp3j
fixed_packages
0
url pkg:maven/io.dataease/dataease-plugin-common@1.18.10
purl pkg:maven/io.dataease/dataease-plugin-common@1.18.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.18.10
aliases CVE-2023-40771, GHSA-8rv7-g772-pp3j
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4tmn-f9w4-nqcv
2
url VCID-8qqy-7b2e-xubv
vulnerability_id VCID-8qqy-7b2e-xubv
summary Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34113
reference_id
reference_type
scores
0
value 0.00358
scoring_system epss
scoring_elements 0.58424
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34113
1
reference_url https://github.com/dataease/dataease
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease
2
reference_url https://github.com/dataease/dataease/issues/2431
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/issues/2431
3
reference_url https://github.com/dataease/dataease/releases/tag/v1.11.2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/releases/tag/v1.11.2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-34113
reference_id CVE-2022-34113
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-34113
5
reference_url https://github.com/advisories/GHSA-5469-c5p2-xv5g
reference_id GHSA-5469-c5p2-xv5g
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5469-c5p2-xv5g
fixed_packages
0
url pkg:maven/io.dataease/dataease-plugin-common@1.11.2
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.2
1
url pkg:maven/io.dataease/dataease-plugin-common@1.11.3
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tmn-f9w4-nqcv
1
vulnerability VCID-hmvg-g1qt-kkgn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.3
aliases CVE-2022-34113, GHSA-5469-c5p2-xv5g
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8qqy-7b2e-xubv
3
url VCID-dy6h-n9pt-uue8
vulnerability_id VCID-dy6h-n9pt-uue8
summary SQL Injection found in Dataease
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34114
reference_id
reference_type
scores
0
value 0.00239
scoring_system epss
scoring_elements 0.47218
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34114
1
reference_url https://github.com/dataease/dataease
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease
2
reference_url https://github.com/dataease/dataease/issues/2430
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/issues/2430
3
reference_url https://github.com/dataease/dataease/releases/tag/v1.11.2
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/releases/tag/v1.11.2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-34114
reference_id CVE-2022-34114
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-34114
5
reference_url https://github.com/advisories/GHSA-hmvw-66jm-h9fh
reference_id GHSA-hmvw-66jm-h9fh
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hmvw-66jm-h9fh
fixed_packages
0
url pkg:maven/io.dataease/dataease-plugin-common@1.11.2
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.2
1
url pkg:maven/io.dataease/dataease-plugin-common@1.11.3
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tmn-f9w4-nqcv
1
vulnerability VCID-hmvg-g1qt-kkgn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.3
aliases CVE-2022-34114, GHSA-hmvw-66jm-h9fh
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dy6h-n9pt-uue8
4
url VCID-fhy6-qywa-euem
vulnerability_id VCID-fhy6-qywa-euem
summary Dataease v1.11.1 SQL Injection via parameter dataSourceId
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34115
reference_id
reference_type
scores
0
value 0.00363
scoring_system epss
scoring_elements 0.58784
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34115
1
reference_url https://github.com/dataease/dataease
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease
2
reference_url https://github.com/dataease/dataease/issues/2428
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/issues/2428
3
reference_url https://github.com/dataease/dataease/releases/tag/v1.11.2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease/releases/tag/v1.11.2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-34115
reference_id CVE-2022-34115
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-34115
5
reference_url https://github.com/advisories/GHSA-vjmr-6pmm-rprf
reference_id GHSA-vjmr-6pmm-rprf
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vjmr-6pmm-rprf
fixed_packages
0
url pkg:maven/io.dataease/dataease-plugin-common@1.11.2
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.2
1
url pkg:maven/io.dataease/dataease-plugin-common@1.11.3
purl pkg:maven/io.dataease/dataease-plugin-common@1.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tmn-f9w4-nqcv
1
vulnerability VCID-hmvg-g1qt-kkgn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.3
aliases CVE-2022-34115, GHSA-vjmr-6pmm-rprf
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fhy6-qywa-euem
5
url VCID-hmvg-g1qt-kkgn
vulnerability_id VCID-hmvg-g1qt-kkgn
summary DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's dashboard or messages or interfering with the interface for marking messages read. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-32310
reference_id
reference_type
scores
0
value 0.00534
scoring_system epss
scoring_elements 0.67837
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-32310
1
reference_url https://github.com/dataease/dataease
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dataease/dataease
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-32310
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-32310
3
reference_url https://github.com/dataease/dataease/pull/5342
reference_id 5342
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-08T21:48:54Z/
url https://github.com/dataease/dataease/pull/5342
4
reference_url https://github.com/dataease/dataease/commit/72f428e87b5395c03d2f94ef6185fc247ddbc8dc
reference_id 72f428e87b5395c03d2f94ef6185fc247ddbc8dc
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-08T21:48:54Z/
url https://github.com/dataease/dataease/commit/72f428e87b5395c03d2f94ef6185fc247ddbc8dc
5
reference_url https://github.com/advisories/GHSA-7hv6-gv38-78wj
reference_id GHSA-7hv6-gv38-78wj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7hv6-gv38-78wj
6
reference_url https://github.com/dataease/dataease/security/advisories/GHSA-7hv6-gv38-78wj
reference_id GHSA-7hv6-gv38-78wj
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-08T21:48:54Z/
url https://github.com/dataease/dataease/security/advisories/GHSA-7hv6-gv38-78wj
7
reference_url https://github.com/dataease/dataease/releases/tag/v1.18.7
reference_id v1.18.7
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-08T21:48:54Z/
url https://github.com/dataease/dataease/releases/tag/v1.18.7
fixed_packages
0
url pkg:maven/io.dataease/dataease-plugin-common@1.18.7
purl pkg:maven/io.dataease/dataease-plugin-common@1.18.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4tmn-f9w4-nqcv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.18.7
aliases CVE-2023-32310, GHSA-7hv6-gv38-78wj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hmvg-g1qt-kkgn
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/io.dataease/dataease-plugin-common@1.11.1