Dataease Project vulnerabilities
We track 1 vulnerability in Dataease Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Dataease Project vulnerabilities
- 7.5 High severity
dataease: Incorrect Authorization
DataEase is an open source data visualization analysis tool. Due to the lack of restrictions on the connection parameters for the ClickHouse data source, it is possible to exploit certain malicious parameters to achieve arbitrary file reading. The vulnerabilit