Critical severity9.8NVD Advisory· Published Mar 25, 2023· Updated Jun 17, 2026

CVE-2023-28437

Description

Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing entries. This vulnerability has been fixed in version 1.18.5. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dataease/Dataease3 versions
cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*range: <1.18.5
- (no CPE)range: <1.18.5
- (no CPE)range: < 1.18.5

Patches

Vulnerability mechanics

References

github.com/dataease/dataease/issues/4795nvdExploitIssue TrackingVendor Advisory
github.com/dataease/dataease/security/advisories/GHSA-7j7j-9rw6-3r56nvdExploitVendor Advisory
github.com/dataease/dataease/releases/tag/v1.18.5nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000