{"id":"CVE-2026-111613","summary":"AllData through 0.7.1 Unauthenticated JDBC Injection via /jobJdbcDatasource/test","details":"AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with allowLoadLocalInfile=true pointing to an attacker-controlled server to read arbitrary files from the data-dts host.","modified":"2026-10-21T02:55:48.207309615Z","published":"2026-10-16T17:38:52.517Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-306"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111613.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111613.json"},{"type":"PACKAGE","url":"https://github.com/alldatacenter/alldata"},{"type":"ARTICLE","url":"https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/config/WebSecurityConfiguration.java"},{"type":"ARTICLE","url":"https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/controller/JobDatasourceController.java#L131-L135"},{"type":"ARTICLE","url":"https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/tool/query/BaseQueryTool.java#L107-L124"},{"type":"ADVISORY","url":"https://hackmd.io/@hieuPenguinnn/alldata-dts-unauthenticated-jdbc-url-injection"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111613"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/alldata-through-0.7.1-unauthenticated-jdbc-injection-via-jobjdbcdatasource-test"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/alldatacenter/alldata","events":[{"introduced":"0"},{"last_affected":"8ea25980bb60ea63dc0ad9eb7aedf71c15464635"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"last_affected":"0.7.1"}],"source":"AFFECTED_FIELD","strategy":"StandardRange"}]}}],"versions":["alldata-release-0.7.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111613.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}]}