CVE-2022-34114

HIGH8.8EPSS 0.24%

SQL Injection found in Dataease

Published: 7/23/2022Modified: 11/8/2023

Description

Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter `dataSourceId`. Version 1.11.2 contains a fix.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (4)