5.1
Medium
CVE-2026-8724 A security flaw has been discovered in Dataease 2.10.20
Description
A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The manipulation results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dataease | 2.10.20 | No fix stated |
Other CVEs of Dataease
The 6 CVEs of Dataease →
CVE-2026-123992
DataEase SVG StaticResourceServer.java StaticResourceServer.validateSvgContent cross site scripting
5.3
Medium
CVE-2026-123991
DataEase Authentication Filter WhitelistUtils.java WhitelistUtils.endsWithAny unrestricted upload
6.9
Medium
CVE-2026-123990
DataEase Chart Data ExtWhere2Str.java ExtWhere2Str.extWhere2sqlOjb sql injection
6.9
Medium
CVE-2026-108824
A flaw has been found in DataEase up to 3.0.0
5.3
Medium