CVE-2026-45534
DataEase is an open source data visualization and analysis tool.
Impact
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration from System.getProperty("java.io.tmpdir"), setting socketFactory=org.springframework.context.support.FileSystemXmlApplicationContext so com.amazon.redshift.Driver#connect, com.amazon.redshift.Driver#getJdbcIniFile, and com.amazon.redshift.util.ObjectFactory#instantiate execute a reflection-based remote code execution chain during a normal JDBC connection through io.dataease.datasource.type.Redshift. This issue is fixed in version 2.10.23.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/dataease/dataease/commit/3e58149f1e014b1a7ae2c12134b37ae438f676ac
- https://github.com/dataease/dataease/releases/tag/v2.10.23
- https://github.com/dataease/dataease/security/advisories/GHSA-cv4c-8rpv-2x97
- https://github.com/dataease/dataease/security/advisories/GHSA-cv4c-8rpv-2x97