CVE-2024-30269

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 08/04/2024 Updated: 08/04/2024

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configuration is returned. The vulnerability has been fixed in v2.5.0. No known workarounds are available aside from upgrading.

https://github.com/dataease/dataease/security/advisories/GHSA-8gvx-4qvj-6vv5 https://github.com/dataease/dataease/releases/tag/v2.5.0 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-30269

Vulnerability Summary

References

Vulmon Search

About

Products

Connect