DataEase v2.10.23 Pre-Auth SQL Injection and Driver JAR RCE POC

github.com 2026-07-16查看中文 →

Security AdvisoryCriticalDataEase

Affected:

DataEase < v2.10.23

Fixed in:

v2.10.23

Referenced CVEs: CVE-2026-45320

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Netty CVE-2025-56822: Race Condition in OcsServerCertificateValidator Async OCSP Validation 2026-07-29 Netty Out-of-date OCSP Response Accepted - Certificate Revocation Bypass 2026-07-29 ClickHouse Client SQL Injection via Trailing Backslash 2026-07-29 SQL Injection in @hypequery/clickhouse parameter escaping (CVE-2024-5468) 2026-07-29 SQL Injection Vulnerability in @hypequery/clickhouse escapeValue Function and Fix 2026-07-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive