CVE-2023-34463

Published Jun 26, 2023

Last updated 3 months ago

Overview

Description: DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized users can delete an application erroneously. This vulnerability has been fixed in version 1.18.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: security-advisories@github.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.1
Impact score: 5.2
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Severity: HIGH

Weaknesses

security-advisories@github.com: CWE-862

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21DCEC86-16D9-4180-9088-06D6AD31EF93",
            "versionEndExcluding": "1.18.8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References