Description
An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.
Remediation
References
https://github.com/dataease/dataease/issues/2429
Related Vulnerabilities
CVE-2023-24621 Vulnerability in maven package com.esotericsoftware.yamlbeans:yamlbeans
CVE-2018-1000160 Vulnerability in npm package @risingstack/protect
CVE-2022-2079 Vulnerability in npm package nocodb
CVE-2020-28459 Vulnerability in npm package markdown-it-decorate
CVE-2020-28452 Vulnerability in maven package com.softwaremill.akka-http-session:core_2.13