Gửi #731233: running-elephant datart latest Code Execution, Command Execution, Server Compromised.thông tin

tiêu đềrunning-elephant datart latest Code Execution, Command Execution, Server Compromised.
Mô tảTwo deserialization vulnerabilities exist in the Datart Data Visualization Open Platform due to insecure deserialization operations on input streams within the extractModel function. These vulnerabilities could lead to remote code execution and compromise of the affected server.
Nguồn⚠️ https://github.com/p1026/CVE/issues/61
Người dùng pyj2cve (UID 81853)
Đệ trình04/01/2026 07:40 (cách đây 9 các tháng)
Kiểm duyệt16/01/2026 20:01 (13 days later)
Trạng tháiBản sao
Mục VulDB289628 [running-elephant Datart 1.0.0-rc3 File Upload /import extractModel file nâng cao đặc quyền]
điểm0

Do you know our Splunk app?

Download it now for free!