Paper/Archive/CVE-2023-28437

CVE-2023-28437

dataease dataease — SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed

EPSS 0.9%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 59.2.592 × 2011.8 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing entries. This vulnerability has been fixed in version 1.18.5. There are no known workarounds.

Affected

ProductAffectedFixed inSource

dataease< 1.18.5–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/dataease/dataease/security/advisories/GHSA-7j7j-9rw6-3r56 refgithub.com/dataease/dataease/issues/4795 refgithub.com/dataease/dataease/releases/tag/v1.18.5