PT-2022-15935 · Dataease · Dataease

Espduino · Published 2022-02-08 · Updated 2023-08-08 · CVE-2022-23331

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DataEase version 1.6.1

Description The issue allows an authenticated user to gain unauthorized access to all user information and change the administrator password.

Recommendations For DataEase version 1.6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-23331

Affected Products

Dataease

References · 5

• 🔥 https://github.com/dataease/dataease/issues/1618 · Exploit
• https://osv.dev/vulnerability/CVE-2022-23331 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23331 · Security Note
• https://t.me/cvenotify/26676 · Telegram Post
• https://t.me/cibsecurity/37003 · Telegram Post