CVE-2024-31441

Summary

CVE-2024-31441 is a vulnerability affecting DataEase, an open-source data visualization analysis tool. The weakness stems from the absence of restrictions on ClickHouse data source connection parameters. Malicious users can leverage this gap to conduct arbitrary file reading attacks. DataEase has rectified this issue in its v1.18.19 release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.