Beveiligingsadvies

CVE-2026-32137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-12 17:53:00

Laatst bijgewerkt 2026-03-13 16:23:17

Toegewezen door GitHub_M

CVSS-score 9.3

Status PUBLISHED

Beschrijving

Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/previewData is directly concatenated into the SQL statement without any filtering or parameterization. Since tableName is a user-controllable string, attackers can inject malicious SQL statements by constructing malicious table names. This vulnerability is fixed in 2.10.20.

← Alle CVE's bekijken Bekijk op cve.org ↗