---
id: CVE-2026-111613
title: >-
  AllData through 0.7.1 Unauthenticated JDBC Injection via
  /jobJdbcDatasource/test
summary: >-
  AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability
  that allows remote attackers to open arbitrary database connections by
  supplying jdbcUrl and jdbcDriverClass values to the data-dts
  /jobJdbcDatasource/test en…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-306
vendor: alldatacenter
product: alldata
affected:
  - alldata <= 0.7.1
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T17:38:52.517Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111613'
references:
  - url: >-
      https://hackmd.io/@hieuPenguinnn/alldata-dts-unauthenticated-jdbc-url-injection
  - url: >-
      https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/tool/query/BaseQueryTool.java#L107-L124
  - url: >-
      https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/config/WebSecurityConfiguration.java
  - url: >-
      https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/controller/JobDatasourceController.java#L131-L135
  - url: 'https://github.com/alldatacenter/alldata'
  - url: >-
      https://www.vulncheck.com/advisories/alldata-through-0.7.1-unauthenticated-jdbc-injection-via-jobjdbcdatasource-test
    label: >-
      VulnCheck Advisory: AllData through 0.7.1 Unauthenticated JDBC Injection
      via /jobJdbcDatasource/test
tags:
  - cve.org
ingestedAt: '2026-10-16T18:43:08.695Z'
---

## Overview

AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with allowLoadLocalInfile=true pointing to an attacker-controlled server to read arbitrary files from the data-dts host.

## Affected

- `alldata <= 0.7.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.