CVE-2023-37257

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p37

Published

Jul 25, 2023 (Jul 25, 2023)

Modified

Jun 17, 2026

Description

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripting vulnerability. The vulnerability has been fixed in v1.18.9. There are no known workarounds.

Vendors: dataease
Products: dataease
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.