CVE-2026-45320 | DataEase up to 2.10.22 DataEase dashboard SqlparserUtils.transFilter deptId injection

July 15, 2026 Yanac

A vulnerability was found in DataEase up to 2.10.22. It has been declared as problematic. Affected is the function SqlparserUtils.transFilter of the component DataEase dashboard. Executing a manipulation of the argument deptId can lead to injection.

This vulnerability appears as CVE-2026-45320. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More