Vulnerabilidades de Running-elephant
CVEs publicadas que afetam produtos de Running-elephant: 2 registro(s), com severidade, exploração e correções.
CVE-2025-70828
Alta · 8.8
CWE-78 17/02/2026
OS Command Injection em Running-elephant Datart
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
CVE-2025-70829
Média · 5.7
CWE-200 17/02/2026
Exposure of Sensitive Information em Running-elephant Datart
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.