Is CVE-2023-40772 being exploited?

No public exploit is currently tracked.

How severe is CVE-2023-40772?

CVE-2023-40772 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2023-40772

Description

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.