VULNERABILITY INTELLIGENCE

CVE-2023-33963

CVSS score9.8 CRITICAL

EPSS probability1.34%

CISA KEVNot currently listed

Published2023-06-01

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.

Weakness classification

security-advisories@github.com: CWE-502
nvd@nist.gov: CWE-502

Primary references

security-advisories@github.com — Release Notes
security-advisories@github.com — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory