CVE-2026-111695: data-platform-open affected git revisions

Affected technology

data-platform-open · 0 through efeacd35e8450b7a084fa2134d292cd058cf605b
shaiwz

Description’s affected range: through commit efeacd3

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDetail, /update or /delete to obtain JDBC credentials, enumerate database schemas, and modify or delete datasources. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.