Datart Arbitrary Code Execution Vulnerability via INIT Connection Parameter

A remote code execution vulnerability exists in Datart version 1.0.0-rc.3. The issue arises from the INIT connection parameter, which can be exploited by a remote attacker to execute arbitrary code.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where Datart is running.

Reproduction

To reproduce this vulnerability, send a POST request to the Datart server's data provider API with a JDBC data provider type. In the properties section, include an H2 database URL that uses the INIT parameter to create a malicious alias. This alias can then be executed to perform arbitrary actions, such as creating a file on the server.