SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function.
| Software | From | Fixed in |
|---|---|---|
io.dataease / dataease-plugin-common
|
- | 1.18.9.x |
| dataease / dataease | 1.18.9 | 1.18.9.x |