https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 20:01:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-232589 EUVD-2026-232589 https://cve.radiocsirt.org/vuln/euvd-2026-232589 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39312 <p>Dataease is an open source data visualization analysis tool. Dataease prior to 1.15.2 has a deserialization vulnerability. In Dataease, the Mysql data source in the data source function can customize the JDBC connection parameters and the Mysql server target to be connected. In `backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java`, the `MysqlConfiguration` class does not filter any parameters. If an attacker adds some parameters to a JDBC url and connects to a malicious mysql server, the attacker can trigger the mysql jdbc deserialization vulnerability. Through the deserialization vulnerability, the attacker can execute system commands and obtain server privileges. Version 1.15.2 contains a patch for this issue.</p> <p>Dataease is an open source data visualization analysis tool. Dataease prior to 1.15.2 has a deserialization vulnerability. In Dataease, the Mysql data source in the data source function can customize the JDBC connection parameters and the Mysql server target to be connected. In `backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java`, the `MysqlConfiguration` class does not filter any parameters. If an attacker adds some parameters to a JDBC url and connects to a malicious mysql server, the attacker can trigger the mysql jdbc deserialization vulnerability. Through the deserialization vulnerability, the attacker can execute system commands and obtain server privileges. Version 1.15.2 contains a patch for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39312 https://cve.radiocsirt.org/vuln/ghsa-q4qq-jhjv-7rh2 <p><strong>Affected:</strong> Maven: io.dataease:dataease-plugin-common</p> <p>### Impact</p> <p>In Dataease, the Mysql data source in the data source function can customize the JDBC connection parameters and the Mysql server target to be connected. </p> <p>In `backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java`, MysqlConfiguration class don&#39;t filter any parameters, directly concat user input. ```java @Getter @Setter public class MysqlConfiguration extends JdbcConfiguration {</p> <p>private String driver = &#34;com.mysql.jdbc.Driver&#34;; private String extraParams = &#34;characterEncoding=UTF-8&amp;connectTimeout=5000&amp;useSSL=false&amp;allowPublicKeyRetrieval=true&amp;zeroDateTimeBehavior=convertToNull&#34;;</p> <p>public String getJdbc() { if(StringUtils.isEmpty(extraParams.trim())){ return &#34;jdbc:mysql://HOSTNAME:PORT/DATABASE&#34; .replace(&#34;HOSTNAME&#34;, getHost().trim()) .replace(&#34;PORT&#34;, getPort().toString().trim()) .replace(&#34;DATABASE&#34;, getDataBase().trim()); }else { return &#34;jdbc:mysql://HOSTNAME:PORT/DATABASE?EXTRA_PARAMS&#34; .replace(&#34;HOSTNAME&#34;, getHost().trim()) .replace(&#34;PORT&#34;, getPort().toString().trim()) .replace(&#34;DATABASE&#34;, getDataBase().trim()) .replace(&#34;EXTRA_PARAMS&#34;, getExtraParams().trim()); } } } ``` So, if the attack add some parameters in J…</p> <p><strong>Affected:</strong> Maven: io.dataease:dataease-plugin-common</p> <p>### Impact</p> <p>In Dataease, the Mysql data source in the data source function can customize the JDBC connection parameters and the Mysql server target to be connected. </p> <p>In `backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java`, MysqlConfiguration class don&#39;t filter any parameters, directly concat user input. ```java @Getter @Setter public class MysqlConfiguration extends JdbcConfiguration {</p> <p>private String driver = &#34;com.mysql.jdbc.Driver&#34;; private String extraParams = &#34;characterEncoding=UTF-8&amp;connectTimeout=5000&amp;useSSL=false&amp;allowPublicKeyRetrieval=true&amp;zeroDateTimeBehavior=convertToNull&#34;;</p> <p>public String getJdbc() { if(StringUtils.isEmpty(extraParams.trim())){ return &#34;jdbc:mysql://HOSTNAME:PORT/DATABASE&#34; .replace(&#34;HOSTNAME&#34;, getHost().trim()) .replace(&#34;PORT&#34;, getPort().toString().trim()) .replace(&#34;DATABASE&#34;, getDataBase().trim()); }else { return &#34;jdbc:mysql://HOSTNAME:PORT/DATABASE?EXTRA_PARAMS&#34; .replace(&#34;HOSTNAME&#34;, getHost().trim()) .replace(&#34;PORT&#34;, getPort().toString().trim()) .replace(&#34;DATABASE&#34;, getDataBase().trim()) .replace(&#34;EXTRA_PARAMS&#34;, getExtraParams().trim()); } } } ``` So, if the attack add some parameters in J…</p> https://cve.radiocsirt.org/vuln/ghsa-q4qq-jhjv-7rh2 https://cve.radiocsirt.org/vuln/gsd-2022-39312 gsd-2022-39312 https://cve.radiocsirt.org/vuln/gsd-2022-39312