CVE-2023-32310

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's dashboard or messages or interfering with the interface for marking messages read. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Jun 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-323114.3CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace pe CVE-2023-323125.3UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integration. In affected CVE-2023-323135.3vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was possible to get a read CVE-2023-3231410.0vm2 is a sandbox that can run untrusted code with Node's built-in modules. A sandbox escape vulnerability exists in vm2 for versions up to a CVE-2023-323157.5Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was fo CVE-2023-323164.3CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplor CVE-2023-323177.2Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS chea CVE-2023-323186.7Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevente CVE-2023-323196.5Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth CVE-2023-32329.8A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file CVE-2023-323207.5Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, a CVE-2023-323219.8CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan