Beveiligingsadvies

CVE-2026-50124

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-15 19:38:14

Laatst bijgewerkt 2026-07-17 12:25:17

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where CalciteProvider.jdbcFetchResultField calls statement.executeQuery(), causing precompiled Java aliases in test.mv.db to execute arbitrary code. This issue is fixed in version 2.10.23.

← Alle CVE's bekijken Bekijk op cve.org ↗