CNNVD-202506-3304 Information

CNNVD ID

CNNVD-202506-3304

CVE-2025-49003

  • CNNVD Published: 2025-06-26

Description (Chinese)

DataEase是DataEase开源的一个开源的数据可视化分析工具。用于帮助用户快速分析数据并洞察业务趋势,从而实现业务的改进与优化。 DataEase 2.10.11之前版本存在安全漏洞,该漏洞源于Java字符转换特性可能导致远程代码执行。

Description (English)

DataEase is an open source data visualization analysis tool for DataEase open sources. To help users quickly analyse data and see business trends, thereby improving and optimizing operations. There was a security loophole in the previous version of DataEase 2.10.11, which stemmed from the Java character conversion properties that could lead to remote code execution.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

DataEase

Published

2025-06-26

Last Modified

2026-02-24

References

https://github.com/dataease/dataease/security/advisories/GHSA-x97w-69ff-r55q https://nvd.nist.gov/vuln/detail/CVE-2025-49003

Patch

https://github.com/dataease/dataease/releases

Share on: