CVE-2023-35164 in Dataeaseinformação

Sumário

de MITRE • 27/06/2023

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing authorization check allows unauthorized users to manipulate a dashboard created by the administrator. This vulnerability has been fixed in version 1.18.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

GitHub, Inc.

Reservar

14/06/2023

Divulgação

27/06/2023

Moderação

aceite

Entrada

VDB-232414

CPE

pronto

CWE

CWE-862 (confirmado)

CVSS

6.5 (NVD)

EPSS

0.00445

KEV

não

Atividades

muito baixo

Fontes

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-35164
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-35164
CVE Details	https://www.cvedetails.com/cve/CVE-2023-35164/

◂ Voltar Visão Geral Próximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!