Name of the Vulnerable Software and Affected Versions:
DataEase versions prior to 2.10.6
Description:
The issue allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. There are no known workarounds available.
Recommendations:
For versions prior to 2.10.6, update to version 2.10.6 to resolve the issue. As a temporary workaround, consider restricting access to the background JDBC connection until the update is applied.