CVE-2026-45419 | DataEase up to 2.10.22 Template Manage save staticResource name path traversal

July 15, 2026 Yanac

A vulnerability was found in DataEase up to 2.10.22. It has been rated as critical. Affected by this vulnerability is the function Save of the file /de2api/templateManage/save of the component Template Manage. The manipulation of the argument staticResource name leads to path traversal.

This vulnerability is traded as CVE-2026-45419. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More