CVE-2024-30269

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configuration is returned. The vulnerability has been fixed in v2.5.0. No known workarounds are available aside from upgrading.

• CWE-200

• https://github.com/dataease/dataease/releases/tag/v2.5.0Release Notes
• https://github.com/dataease/dataease/security/advisories/GHSA-8gvx-4qvj-6vv5Vendor Advisory
• https://github.com/dataease/dataease/releases/tag/v2.5.0Release Notes
• https://github.com/dataease/dataease/security/advisories/GHSA-8gvx-4qvj-6vv5Vendor Advisory

Published

Apr 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30262Contao is an open source content management system. Prior to…7.1
• CVE-2024-30263macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozill…7.7
• CVE-2024-30264Typebot is an open-source chatbot builder. A reflected cross…9.3
• CVE-2024-30265Collabora Online is a collaborative online office suite base…7.5
• CVE-2024-30266wasmtime is a runtime for WebAssembly. The 19.0.0 release of…5.5
• CVE-2024-30268Cacti provides an operational monitoring and fault managemen…6.1
• CVE-2024-3027The Smart Slider 3 plugin for WordPress is vulnerable to una…6.4
• CVE-2024-30270mailcow: dockerized is an open source groupware/email suite …6.2
• CVE-2024-30271Illustrator versions 28.3, 27.9.2 and earlier are affected b…7.8
• CVE-2024-30272Illustrator versions 28.3, 27.9.2 and earlier are affected b…7.8
• CVE-2024-30273Illustrator versions 28.3, 27.9.2 and earlier are affected b…7.8
• CVE-2024-30274Substance3D - Painter versions 9.1.2 and earlier are affecte…7.8