Beveiligingsadvies

CVE-2024-31441

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-10 14:43:23

Laatst bijgewerkt 2024-08-02 01:52:56

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

DataEase is an open source data visualization analysis tool. Due to the lack of restrictions on the connection parameters for the ClickHouse data source, it is possible to exploit certain malicious parameters to achieve arbitrary file reading. The vulnerability has been fixed in v1.18.19.

← Alle CVE's bekijken Bekijk op cve.org ↗