medium5.7
CVE-2025-70829
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.
Impact
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Running-Elephant | Datart | Version 1.0.0 |