CyberRota Analysis
AI-GeneratedDataEase versions prior to 2.10.23 are vulnerable to stored SQL injection due to improper handling of attacker-controlled SQL variable defaultValue entries, which can be exploited when users with read permissions access the affected datasets. This vulnerability poses a significant risk as it allows attackers to execute arbitrary SQL commands within the application. Organizations using DataEase for data visualization and analysis should prioritize upgrading to version 2.10.23 to mitigate this security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as ${var} and SqlparserUtils.handleVariableDefaultValue() inserts them with String.replace() without escaping or parameterization, causing stored SQL injection whenever a user with dataset read permission accesses the dataset. This issue is fixed in version 2.10.23.