Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2023-28437

Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing entries. This vulnerability has been fixed in version 1.18.5. There are no known workarounds.

  • Published: Mar 25, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-28437
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
dataease / dataease - 1.18.5