CVE-2022-34112

Description

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.

Related CPE's

References

https://github.com/dataease/dataease/issues/2429

CvssV3 impact

CvssV2 impact