Description
Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.
Remediation
References
https://github.com/dataease/dataease/issues/2430
Related Vulnerabilities
CVE-2020-28276 Vulnerability in npm package deep-set
CVE-2023-32235 Vulnerability in npm package ghost
CVE-2021-21307 Vulnerability in maven package org.lucee:lucee
CVE-2021-29418 Vulnerability in npm package netmask
CVE-2023-37960 Vulnerability in maven package io.jenkins.plugins:mathworks-polyspace