CVE-2025-70828 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
High CVSS: 8.8

CVE-2025-70828

An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
Vendor
Running-elephant
Product
Datart
CWE
CWE-78
Yayın Tarihi
2026-02-17 16:20:25
Güncelleme
2026-04-03 11:33:23
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-78 Datart HIGH Running-elephant 2026

Referanslar

https://dev.mysql.com/doc/connector-j/en/connector-j-connprops-interceptor-classes-and-interfaces.html https://github.com/xiaoxiaoranxxx/CVE-2025-70828