CVE-2026-8724

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-8724

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8724.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-8724

Published

2026-05-17T00:30:10.259Z

Modified

2026-08-12T03:51:38.106277344Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection

Details

A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The manipulation results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.10.20"
                },
                {
                    "last_affected": "2.10.20"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8724.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ]
}

References

Affected packages

Git / github.com/dataease/dataease

Affected ranges

Type

GIT

Repo

https://github.com/dataease/dataease

Events

Introduced

ba0052aff05d85b5ae6e81f687b777b242222dd4

Last affected

ba0052aff05d85b5ae6e81f687b777b242222dd4

Database specific

Show details

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:dataease:dataease:2.10.20:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.10.20"
        },
        {
            "last_affected": "2.10.20"
        }
    ]
}

Affected versions

2.*

2.10.20

v2.*

v2.10.20

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8724.json"