CVE-2026-104143 | DataEase up to 2.10.25 DatasetTableFieldDTO dateFormat sql injection

October 14, 2026 Yanac

A vulnerability described as critical has been identified in DataEase up to 2.10.25. Affected is an unknown function of the component DatasetTableFieldDTO. Such manipulation of the argument dateFormat leads to sql injection.

This vulnerability is referenced as CVE-2026-104143. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More