Threats tagged 'ghsa-847p-g7jh-6x59'

CVE-2026-123991 is a vulnerability in DataEase up to version 2.10.27 affecting the WhitelistUtils.endsWithAny function in the Authentication Filter component. It allows an attacker to perform unrestricted file uploads by manipulating the File argument remotely. The issue is fixed in version 2.10.28 by enforcing authentication on the static-resource upload endpoint regardless of URI suffix whitelist.