CVE-2023-37257

MediumCVSS 5.4

Published: 25/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

Summary

DataEase is a data visualization analysis tool that prior to version 1.18.9 had a stored cross-site scripting (XSS) vulnerability in the panel and dataset. The vulnerability has been fixed in version 1.18.9.

Risk Assessment

Organizations using versions prior to 1.18.9 may be exposed to XSS attacks, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to upgrade to version 1.18.9 or later to mitigate this vulnerability.

Original NVD description (English source)

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripting vulnerability. The vulnerability has been fixed in v1.18.9. There are no known workarounds.