Headline

GHSA-c2pj-rr68-pw94: Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue.

2 years ago

ghsa

Open in Source

#git

Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin

High severity GitHub Reviewed Published Jul 23, 2022 • Updated Jul 27, 2022

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.

2 years ago

CVE

Open in Source

#mac #js #git #intel #auth #firefox