Data Platform Open
Approved changes feed: RSS · Atom
cpe:2.3:a:shaiwz:data-platform-open:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shaiwz (5f2cf211-b435-51d1-a6f7-b272f2d93061) |
|---|---|
| Product | Data Platform Open (53518c0a-b62c-54cf-a2e1-8bd6d73e6b13) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111695 |
vulnerable | 2026-11-03 10:16:11.374397 |
Shaiwz data-platform-open through commit efeacd3 IDOR in Datasource API
HIGH (7.1)
Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDetail, /update or /delete to obtain JDBC credentials, enumerate database schemas, and modify or delete datasources.
Published: 2026-10-16T17:39:50.272Z
Updated: 2026-10-19T13:36:34.574Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111696 |
vulnerable | 2026-11-03 10:16:10.930806 |
data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords
MEDIUM (6.5)
data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via cross-workspace IDOR, and decrypt them offline to recover plaintext database credentials.
Published: 2026-10-16T17:39:50.964Z
Updated: 2026-10-16T21:17:09.657Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.