漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
DataEase has an improper authentication vulnerability
Vulnerability Description
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which may cause the risk of unauthorized access. The vulnerability has been fixed in v2.10.6. No known workarounds are available.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
DataEase 授权问题漏洞
Vulnerability Description
DataEase是DataEase开源的一个开源的数据可视化分析工具。用于帮助用户快速分析数据并洞察业务趋势，从而实现业务的改进与优化。 DataEase 2.10.6之前版本存在授权问题漏洞，该漏洞源于io.dataease.auth.filter.TokenFilter类中的身份验证缺陷，可能导致未经授权的访问风险。
CVSS Information
N/A
Vulnerability Type
N/A