Two critical flaws in the open-source BI tool DataEase allow attackers to achieve remote code execution and arbitrary file writes, exposing unpatched systems to compromise.
DataEase
DataEase has critical flaws in database connection handling, allowing remote RCE and JDBC parameter bypasses for H2, Redshift, and PostgreSQL. Update to v2.10.11 now!
Stay informed about the critical vulnerability (CVE-2024-56511) in the DataEase BI tool. Learn how attackers can bypass authentication and gain unauthorized access to sensitive data.