| Название | running-elephant datart latest Code Execution, Command Execution, Server Compromised. |
|---|
| Описание | Two deserialization vulnerabilities exist in the Datart Data Visualization Open Platform due to insecure deserialization operations on input streams within the extractModel function. These vulnerabilities could lead to remote code execution and compromise of the affected server. |
|---|
| Источник | ⚠️ https://github.com/p1026/CVE/issues/61 |
|---|
| Пользователь | pyj2cve (UID 81853) |
|---|
| Представление | 04.01.2026 07:40 (9 месяцы назад) |
|---|
| Модерация | 16.01.2026 20:01 (13 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 289628 [running-elephant Datart 1.0.0-rc3 File Upload /import extractModel file эскалация привилегий] |
|---|
| Баллы | 0 |
|---|