VULNERABILITY INTELLIGENCE

CVE-2023-28435

CVSS score6.5 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2023-03-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Description

Dataease is an open source data visualization and analysis tool. The permissions for the file upload interface is not checked so users who are not logged in can upload directly to the background. The file type also goes unchecked, users could upload any type of file. These vulnerabilities has been fixed in version 1.18.5.

Weakness classification

security-advisories@github.com: CWE-79

Primary references

security-advisories@github.com — Exploit, Issue Tracking, Third Party Advisory
security-advisories@github.com — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory