Maven/io.dataease:dataease-plugin-common CVE-2022-34112: medium 6.5, EPSS 0.61%

Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin

Action: Upgrade io.dataease:dataease-plugin-common to 1.11.2 or later.

Affected

Fixed versions

Sources

• osv: GHSA-c2pj-rr68-pw94
• https://nvd.nist.gov/vuln/detail/CVE-2022-34112
• https://github.com/dataease/dataease/issues/2429
• https://github.com/dataease/dataease/commit/5f611d3e3934816e9ad34e3d21807978001e2c8b
• https://github.com/dataease/dataease
• https://github.com/dataease/dataease/releases/tag/v1.11.2

CVE-2022-34112 · published 2022-07-23T00:00:15Z · modified 2023-11-08T04:09:41.550727Z · JSON