CVE-2023-33963

CriticalCVSS 9.8

Published: 01/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.34%

68th percentile - higher than 68% of all known CVEs

Summary

In DataEase, an open source data visualization and analysis tool, prior to version 1.18.7, a deserialization vulnerability exists that can be exploited to execute arbitrary code.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a serious security risk to the system.

Recommendation

It is recommended to upgrade to version 1.18.7 as soon as possible to mitigate this vulnerability.

Original NVD description (English source)

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.