CVE-2023-33963

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p70

Published

Jun 1, 2023 (Jun 1, 2023)

Modified

Jun 17, 2026

Description

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.

Vendors: dataease
Products: dataease
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.