DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.