Description
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.
Remediation
References
https://github.com/dataease/dataease/issues/2431
Related Vulnerabilities
CVE-2022-35916 Vulnerability in npm package @openzeppelin/contracts
CVE-2020-11022 Vulnerability in maven package org.webjars.npm:jquery
CVE-2020-7631 Vulnerability in npm package diskusage-ng
CVE-2020-36187 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-27216 Vulnerability in maven package org.eclipse.jetty:jetty-webapp