GCVE - cpe:2.3:a:dataease_project:dataease:1.11.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dataease_project:dataease:1.11.1:*:*:*:*:*:*:*

part: a version: 1.11.1 update: *

Vendor	Dataease Project (`eb1f9774-2093-5917-957d-dbed9f953680`)
Product	Dataease (`baf0dd32-de00-56c9-afbf-c365ec69b5c5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/dataease/dataease`	purl2cpe	2026-06-01 10:15:41.604001

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34115`	vulnerable	2026-06-08 05:44:52.049525	Details available DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId. Published: 2022-07-22T22:16:54.000Z Updated: 2024-08-03T08:16:16.816Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2428 https://github.com/dataease/dataease/releases/tag/v1.11.2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34114`	vulnerable	2026-06-08 05:44:52.049240	Details available Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId. Published: 2022-07-22T22:17:18.000Z Updated: 2024-08-03T08:16:16.637Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2430	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34112`	vulnerable	2026-06-08 05:44:52.047886	Details available An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Published: 2022-07-22T22:17:18.000Z Updated: 2024-08-03T08:16:16.891Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2429	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.