GCVE - cpe:2.3:a:dataease:dataease:1.11.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dataease:dataease:1.11.1:*:*:*:*:*:*:*

part: a version: 1.11.1 update: *

Vendor	Dataease (`49a0f5ff-39a9-53d0-a220-9b602aa445ea`)
Product	Dataease (`c23d27a7-8ceb-52a5-8b67-64037e1f69bf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/coco-bigdata/dataease`	purl2cpe	2026-06-01 10:12:08.187436
`pkg:github/dataease/dataease`	purl2cpe	2026-06-01 10:12:08.187437
`pkg:sourceforge/dataease.mirror`	purl2cpe	2026-06-01 10:12:08.187438

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34115`	vulnerable	2026-06-08 05:44:52.049545	Details available DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId. Published: 2022-07-22T22:16:54.000Z Updated: 2024-08-03T08:16:16.816Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2428 https://github.com/dataease/dataease/releases/tag/v1.11.2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34114`	vulnerable	2026-06-08 05:44:52.049260	Details available Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId. Published: 2022-07-22T22:17:18.000Z Updated: 2024-08-03T08:16:16.637Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2430	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34113`	vulnerable	2026-06-08 05:44:52.048957	Details available An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin. Published: 2022-07-22T22:17:07.000Z Updated: 2024-08-03T08:16:16.620Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2431	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34112`	vulnerable	2026-06-08 05:44:52.048470	Details available An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Published: 2022-07-22T22:17:18.000Z Updated: 2024-08-03T08:16:16.891Z Open on db.gcve.eu Reference links https://github.com/dataease/dataease/issues/2429	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.