CVE-2023-28435

Dataease is an open source data visualization and analysis tool. The permissions for the file upload interface is not checked so users who are not logged in can upload directly to the background. The file type also goes unchecked, users could upload any type of file. These vulnerabilities has been fixed in version 1.18.5.

• CWE-79

• https://github.com/dataease/dataease/issues/4798Exploit, Issue Tracking, Third Party Advisory
• https://github.com/dataease/dataease/security/advisories/GHSA-625h-q3g9-rffcExploit, Vendor Advisory
• https://github.com/dataease/dataease/issues/4798Exploit, Issue Tracking, Third Party Advisory
• https://github.com/dataease/dataease/security/advisories/GHSA-625h-q3g9-rffcExploit, Vendor Advisory

Published

Mar 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2843The MultiParcels Shipping For WooCommerce WordPress plugin b…8.8
• CVE-2023-28430OneSignal is an email, sms, push notification, and in-app me…8.1
• CVE-2023-28431Frontier is an Ethereum compatibility layer for Substrate. F…7.5
• CVE-2023-28432Minio is a Multi-Cloud Object Storage framework. In a cluste…7.5
• CVE-2023-28433Minio is a Multi-Cloud Object Storage framework. All users o…8.8
• CVE-2023-28434Minio is a Multi-Cloud Object Storage framework. Prior to RE…8.8
• CVE-2023-28436Tailscale is software for using Wireguard and multi-factor a…8
• CVE-2023-28437Dataease is an open source data visualization and analysis t…9.8
• CVE-2023-28438Pimcore is an open source data and experience management pla…8
• CVE-2023-28439CKEditor4 is an open source what-you-see-is-what-you-get HTM…6.1
• CVE-2023-2844Authorization Bypass Through User-Controlled Key in GitHub r…4.9
• CVE-2023-28440Discourse is an open source platform for community discussio…2.7