alldatacenter CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH alldatacenter CVE published 2026-10-16

CVE-2026-111613

The AllData application through version 0.7.1 contains an unauthenticated JDBC injection vulnerability. This vulnerability allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the /jobJdbcDatasource/test endpoint. An attacker can exploit this by providing a MySQL JDBC URL with allowLoadLocalInfile=true that points to an attacker-controlled serve [truncated]