DataEase Remote Code Execution via Malicious Font File

Executive Summary

This vulnerability affects DataEase, an open source data visualization and analysis tool. Before version 2.10.24, there was a security flaw that allowed an authenticated attacker to bypass protections related to the H2 zip protocol and file dropper fix. Specifically, the attacker could upload a zip archive disguised with a .ttf (font) file extension via the FontManage.saveFile function. By exploiting the zip protocol through this disguised file, the attacker could achieve remote code execution on the affected system.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a severe impact as it allows an authenticated attacker to execute arbitrary code remotely on the affected system. This means the attacker could potentially take full control of the system, leading to data theft, data manipulation, service disruption, or further attacks within the network.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade DataEase to version 2.10.24 or later, where the issue is fixed.

Additionally, restrict authenticated users from uploading files with disguised extensions such as .ttf that could be exploited via the zip protocol.

Useful 0 Not Useful 0