medium6.3
CVE-2025-13268
A flaw has been found in Dromara dataCompare up to 1.0.1.
Impact
A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used.
Affected products
| Product | Affected versions |
|---|---|
| Dromara DataCompare | before 1.0.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.