CVE-2024-47074: Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability
First published: Fri Oct 11 2024(Updated: )
DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java, PgConfiguration class don't filter any parameters, directly concat user input. So, if the attacker adds some parameters in JDBC url, and connect to evil PG server, the attacker can trigger the PG jdbc deserialization vulnerability, and eventually the attacker can execute through the deserialization vulnerability system commands and obtain server privileges. The vulnerability has been fixed in v1.18.25.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dataease | <1.18.25 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-47074?
CVE-2024-47074 is classified as a medium severity vulnerability.
How do I fix CVE-2024-47074?
To fix CVE-2024-47074, upgrade DataEase to version 1.18.25 or later.
What are the affected versions of CVE-2024-47074?
CVE-2024-47074 affects all versions of DataEase prior to 1.18.25.
What kind of vulnerability is CVE-2024-47074?
CVE-2024-47074 is a vulnerability related to the JDBC connection parameters in the PostgreSQL data source.
Who is affected by CVE-2024-47074?
Users of DataEase versions prior to 1.18.25 utilizing PostgreSQL are at risk from CVE-2024-47074.
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/dataease
- canonical/dataease