io.dataease:dataease-plugin-common vulnerabilities (Maven)

7 vulnerabilities.

• io.dataease:dataease-plugin-common Maven DataEase vulnerable to SQL injection CVE-2023-40771 7.5 HighSeptember 1, 2023
• io.dataease:dataease-plugin-common Maven DataEase API interface has IDOR vulnerability CVE-2023-32310 Fix available 8.1 HighJune 1, 2023
• io.dataease:dataease-plugin-common Maven Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability CVE-2022-39312 Fix available 9.8 CriticalOctober 18, 2022
• io.dataease:dataease-plugin-common Maven SQL Injection found in Dataease CVE-2022-34114 Fix available 8.8 HighJuly 22, 2022
• io.dataease:dataease-plugin-common Maven Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin CVE-2022-34112 Fix available 6.5 MediumJuly 22, 2022
• io.dataease:dataease-plugin-common Maven Dataease before 1.11.2 allows arbitrary code execution via crafter plugin CVE-2022-34113 Fix available 9.8 CriticalJuly 22, 2022
• io.dataease:dataease-plugin-common Maven Dataease v1.11.1 SQL Injection via parameter dataSourceId CVE-2022-34115 Fix available 9.8 CriticalJuly 22, 2022