Description
DataEase是一个开源的数据可视化分析工具。用于帮助用户快速分析数据并洞察业务趋势，从而实现业务的改进与优化。 DataEase v1.11.1 存在SQL注入漏洞，该漏洞源于普通权限用户可调用 /dataset/table/sqlPreview 接口。
DataEase SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2023-28437
https://blog.csdn.net/qq_33530840/article/details/140019556
https://github.com/dataease/dataease/issues/510
https://www.cnblogs.com/fuchangjiang/p/17683955.html
https://ryze-t.com/2024/05/09/Dataease%E6%BC%8F%E6%B4%9E/
https://blog.fit2cloud.com/?p=f77897a6-0c63-4aea-8ec1-c447cf2e7173
https://zone.ci/aliyun/ali_nvd/24473.html
https://cn-sec.com/archives/1914720.html
https://nvd.nist.gov/vuln/detail/CVE-2023-28437