CVE-2024-46997

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Sep 23, 2024 (Sep 23, 2024)

Modified

Jun 17, 2026

Description

DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1.

Vendors: dataease
Products: dataease
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.