8.8
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
AI Analysis
Arbitrary code execution via the url parameter in the JDBC configuration
Basic Information
ID
CVE-2025-70828
Source
mitre
Published
Feb 17, 2026 at 00:00
Modified
Feb 17, 2026 at 15:59
Affected Product
Vendor
Datart
Product
Datart
Version
1.0.0-rc.3
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
8.8 / 10
AI Severity
High
Vendor
Datart
Product
Datart
Version
1.0.0-rc.3