CVE Intelligence

Dromara dataCompare vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dromara dataCompare: 1 record(s), with affected versions and fixes.

CVE-2025-13268 Medium · 6.3 CWE-74 Nov 17, 2025
Dromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injection
A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used.