PT-2023-25175 · Dataease · Dataease
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
DataEase versions prior to 1.18.8
Description
The issue is related to a missing authorization check, allowing unauthorized users to manipulate a dashboard created by the administrator in an open source data visualization analysis tool.
Recommendations
For versions prior to 1.18.8, upgrade to version 1.18.8 to resolve the issue. As a temporary workaround, consider restricting access to dashboards created by administrators until the upgrade is applied.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dataease