CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved…

published July 22, 2022

CVSS
—
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.7th percentile
Published
2022-07-22T22:17Z
EPSS history
Timeline
  • 22 JUL 22:17Z
    An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved…
    cvelistv5