CyberRota Analysis
AI-GeneratedDataEase versions prior to 2.10.23 are vulnerable to a remote code execution flaw due to the ability of attacker-controlled rsjdbc.ini files to be loaded from the system's temporary directory. This vulnerability allows malicious actors to execute arbitrary code during JDBC connections, potentially compromising the integrity of the application and its data. Organizations using DataEase for data visualization and analysis should prioritize upgrading to version 2.10.23 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration from System.getProperty("java.io.tmpdir"), setting socketFactory=org.springframework.context.support.FileSystemXmlApplicationContext so com.amazon.redshift.Driver#connect, com.amazon.redshift.Driver#getJdbcIniFile, and com.amazon.redshift.util.ObjectFactory#instantiate execute a reflection-based remote code execution chain during a normal JDBC connection through io.dataease.datasource.type.Redshift. This issue is fixed in version 2.10.23.