CNNVD-202601-3912 Information
Jan 22, 2026
cve
CNNVD ID
CNNVD-202601-3912
Related CVE
- CNNVD Published: 2026-01-22
Description (Chinese)
DataEase是DataEase开源的一个开源的数据可视化分析工具。用于帮助用户快速分析数据并洞察业务趋势，从而实现业务的改进与优化。 DataEase 2.10.19之前版本存在安全漏洞，该漏洞源于使用用户密码的MD5哈希作为JWT签名密钥，可能导致暴力破解管理员密码。
Description (English)
DataEase is an open source data visualization analysis tool for DataEase open sources. To help users quickly analyse data and see business trends, thereby improving and optimizing operations. There was a security loophole in the previous version of DataEase 2.10.19, which originated from MD5H as a JWT signature key using a user password, which could lead to violent deciphering of the administrator ’ s password.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
DataEase
Published
2026-01-22
Last Modified
2026-02-24
References
https://github.com/dataease/dataease/security/advisories/GHSA-5wvm-4m4q-rh7j
Patch
https://dataease.io/desktop/index.html
Share on: