Approved changes feed: RSS · Atom

cpe:2.3:a:datax-web_project:datax-web:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

VendorDatax Web Project (d0b49822-1c91-578c-8431-4041b0976f31)
ProductDatax Web (237d39fd-5b70-57b1-aa47-639d488c6ea8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitee/weiye-jing/datax-web purl2cpe 2026-06-01 10:12:51.592046
pkg:github/weiye-jing/datax-web purl2cpe 2026-06-01 10:12:51.592047
pkg:golang/github.com/weiye-jing/datax-web purl2cpe 2026-06-01 10:12:51.592049

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12358 vulnerable 2026-06-08 06:23:51.777792 WeiYe-Jing datax-web add os command injection
MEDIUM (6.3)
A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This affects an unknown part of the file /api/job/add/. The manipulation of the argument glueSource leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-09T04:31:11.396Z
Updated: 2024-12-09T19:57:29.558Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.