https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:31:22.944821+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45533 CVE-2026-45533 — DataEase: Path Traversal Vulnerability 2026-10-06T19:31:22.961527+00:00

Affected: dataease

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of arbitrary server directories through export task cleanup. This issue is fixed in version 2.10.23.