pkg:Maven/io.dataease:dataease-plugin-common

All known vulnerabilities

• CRITICAL9.8CVE-2022-39312MySQL JDBC deserialization vulnerability
  from 0, < 1.15.2
• CRITICAL9.8CVE-2022-34115Dataease v1.11.1 SQL Injection via parameter dataSourceId
  from 0, < 1.11.2
• CRITICAL9.8CVE-2022-34113Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
  from 0, < 1.11.2
• HIGH8.8SQL Injection found in Dataease
  from 0, < 1.11.2
• HIGH8.1DataEase API interface has IDOR vulnerability
  from 0, < 1.18.7
• HIGH7.5DataEase vulnerable to SQL injection
  from 0, <= 1.18.9
• MEDIUM6.5Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
  from 0, < 1.11.2