CVE-2023-35164

MediumCVSS 6.3

Published: 26/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

29th percentile - higher than 29% of all known CVEs

Summary

DataEase is a data visualization analysis tool that, in affected versions, has a missing authorization check. This allows unauthorized users to manipulate dashboards created by the administrator.

Risk Assessment

The lack of authorization may lead to unauthorized access and modification of data, threatening the integrity of information within the organization.

Recommendation

It is recommended to upgrade to version 1.18.8, where this vulnerability has been fixed. There are no known workarounds for this vulnerability.

Original NVD description (English source)

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing authorization check allows unauthorized users to manipulate a dashboard created by the administrator. This vulnerability has been fixed in version 1.18.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.