Running-elephant vulnerabilities
We track 2 vulnerabilities in Running-elephant products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Running-elephant vulnerabilities
- 8.8 High severity
Datart: Improper Limitation of a Pathname to a Restricted Directory
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load()
- 7.1 High severity
Datart: Improper Limitation of a Pathname to a Restricted Directory
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name.