See how dataease project compares to other vendors in security performance
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.
Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId.
An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.