CVE-2026-50124 | BDVDB-2026-348641 Detail
dataeasedataease
Description#
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where CalciteProvider.jdbcFetchResultField calls statement.executeQuery(), causing precompiled Java aliases in test.mv.db to execute arbitrary code. This issue is fixed in version 2.10.23.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-434 Unrestricted Upload of File with Dangerous Type
References#
- https://github.com/dataease/dataease/security/advisories/GHSA-cjmg-jqmc-xj5v
- https://github.com/dataease/dataease/commit/304104d70e27a97f8909981f56209edc117dc285
- https://github.com/dataease/dataease/commit/a7bffa795cb0ca041dce0effe68479cf3bf13db1
- https://github.com/dataease/dataease/releases/tag/v2.10.23
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.