CVE-2024-47073 Scanner
CVE-2024-47073 Scanner - JWT Signature Verification Bypass vulnerability in DataEase
Used 2.3k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2024-47073
9.3
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions a the lack of signature verification of jwt tokens allows attackers to forge jwts which then allow access to any interface. The vulnerability has been fixed in v2.10.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
dataease
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: dataease
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →