CVE-2025-70828

HIGH

Datart v1.0.0-rc.3 - Code Injection

Title source: llm

Description

An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration

Exploits (1)

nomisec STUB 1 stars
by xiaoxiaoranxxx · poc
https://github.com/xiaoxiaoranxxx/CVE-2025-70828

References (2)

Scores

CVSS v3 8.8
EPSS 0.0011
EPSS Percentile 29.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
running-elephant/datart 1.0.0 rc3
Published Feb 17, 2026
Tracked Since Feb 18, 2026