5.1
Moyenne
CVE-2026-8724 A security flaw has been discovered in Dataease 2.10.20
Description
A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The manipulation results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dataease | 2.10.20 | Pas de correctif indiqué |
Autres CVE de Dataease
Les 6 CVE de Dataease →
CVE-2026-123992
DataEase SVG StaticResourceServer.java StaticResourceServer.validateSvgContent cross site scripting
5.3
Moyenne
CVE-2026-123991
DataEase Authentication Filter WhitelistUtils.java WhitelistUtils.endsWithAny unrestricted upload
6.9
Moyenne
CVE-2026-123990
DataEase Chart Data ExtWhere2Str.java ExtWhere2Str.extWhere2sqlOjb sql injection
6.9
Moyenne
CVE-2026-108824
A flaw has been found in DataEase up to 3.0.0
5.3
Moyenne