by Kastro
Paper/Archive/CVE-2024-52295

CVE-2024-52295

dataease dataease — DataEase has a forged JWT token vulnerability

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.4.584 × 2011.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and take over services. The JWT secret is hardcoded in the code, and the UID and OID are hardcoded. The vulnerability has been fixed in v2.10.2.

Affected

ProductAffectedFixed inSource
dataease< 2.10.2–CNA
dataease< 2.10.22.10.2CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refgithub.com/dataease/dataease/security/advisories/GHSA-45v9-gfcv-xcq6refgithub.com/dataease/dataease/commit/e755248d59543bcd668ace495f293ff735fa82e9