xiaoxiaoranxxx/CVE-2025-70828

xiaoxiaoranxxx/CVE-2025-70828

Releases0

Stars1

Datart v1.0.0-rc.3 JDBC Connection String Injection Leading to Arbitrary File Read

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-70828 ↗	Feb 17, 2026Tuesday, 17 February 2026, 16:20	8.8 HIGH	—
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration