CVE-2026-82879

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82879
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82879.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82879
Aliases
  • GHSA-9h54-39gh-5qfg
Published
2026-08-31T10:51:05.222Z
Modified
2026-09-02T08:08:04.575219Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
DataEase before 2.10.26 Access Control Bypass via Share Tickets
Details

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another (ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo). The POST /de2api/share/validate endpoint issues a LinkToken after password verification without requiring a ticket, bypassing the 'ticket mandatory' policy. Additionally, the ticket create and delete endpoints (POST /de2api/ticket/saveTicket, POST /de2api/ticket/delTicket) lack share-ownership checks, allowing an authenticated user who knows another user's ticket to modify, rebind, or delete it (denial of service), and GET /de2api/share/queryRelationByUserId/{uid} allows authenticated users to enumerate other users' share mappings.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82879.json",
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-863"
    ]
}
References

Affected packages

Git / github.com/dataease/dataease

Affected ranges

Type
GIT
Repo
https://github.com/dataease/dataease
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
04129b006b2a51447fb15f5c32138f39a4fd4fec
Fixed
fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db
Database specific
Show details 
{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.10.26"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v2.*
v2.10.0
v2.10.1
v2.10.10
v2.10.11
v2.10.12
v2.10.13
v2.10.14
v2.10.15
v2.10.16
v2.10.17
v2.10.18
v2.10.19
v2.10.2
v2.10.20
v2.10.21
v2.10.22
v2.10.23
v2.10.24
v2.10.25
v2.10.3
v2.10.4
v2.10.5
v2.10.6
v2.10.7
v2.10.8
v2.10.9
v2.2.0
v2.3.0
v2.6.0

Database specific

vanir_signatures 
[
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 272.0,
            "function_hash": "332710256286340515987016844050918261353"
        },
        "id": "CVE-2026-82879-0a7f4b13",
        "target": {
            "function": "deleteTicket",
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareTicketManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 581.0,
            "function_hash": "127725825303800260226079256152594735386"
        },
        "id": "CVE-2026-82879-2bc973b5",
        "target": {
            "function": "validatePwd",
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/XpackShareManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "134917235231390776513520438257542129560",
                "114646166780619243588326729669056278488",
                "269288423085927705669435260845232655395",
                "152166330769998611962655038280702019331",
                "22758357250453903227735608901941792507",
                "70831166203007179392879401137510003542",
                "31951369636142811299091883172279217083",
                "246468089769561767322507000787323397024",
                "256875854562352562214491808606675150159",
                "327773903801742417169236487585600721050"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-82879-34422f37",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/XpackShareManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "292805655873746413407571238514450309337",
                "145078180049813446099969074259967950374",
                "91401294132732873473316404795521543196",
                "138919140113161482182074113458939950152",
                "13229635780242305208117253438509342947",
                "197263135666230937764238700704695668341",
                "128558183781667919374255996881644917706",
                "326166208023172631858349656610717189744",
                "33896509320793244713487792938359040036",
                "248432898163601179480159509345480639187",
                "254781160586048382258449872853657873914",
                "126850778631163069987895604541686467900"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-82879-963bedba",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareTicketManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1052.0,
            "function_hash": "130332672531175506017382009034382577377"
        },
        "id": "CVE-2026-82879-97188a7e",
        "target": {
            "function": "saveTicket",
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareTicketManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 829.0,
            "function_hash": "200161447384491699982499460254666331616"
        },
        "id": "CVE-2026-82879-9ee0947c",
        "target": {
            "function": "validateTicket",
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareTicketManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 392.0,
            "function_hash": "250214140558301874927256474277055943159"
        },
        "id": "CVE-2026-82879-b98330f2",
        "target": {
            "function": "queryRelationByUserId",
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/XpackShareManage.java"
        },
        "source": "https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db",
        "signature_version": "v1"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82879.json"
vanir_signatures_modified 
"2026-09-02T08:08:04Z"