CVE-2024-46997
DataEase's H2 datasource has a remote command execution risk
Summary
DataEase's H2 datasource has a remote command execution risk
Original description
The description as published by the source.
DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov