CNNVD-202508-2933 Information
CNNVD ID
CNNVD-202508-2933
Related CVE
- CNNVD Published: 2025-08-25
Description (Chinese)
DataEase是DataEase开源的一个开源的数据可视化分析工具。用于帮助用户快速分析数据并洞察业务趋势，从而实现业务的改进与优化。 DataEase 2.10.12之前版本存在安全漏洞，该漏洞源于DB2参数未过滤，可能导致JNDI注入攻击。
Description (English)
DataEase is an open source data visualization analysis tool for DataEase open sources. To help users quickly analyse data and see business trends, thereby improving and optimizing operations. There was a security loophole in the previous version of DataEase 2.10.12, which stemmed from the fact that the DB2 parameters were not filtered and could lead to JNDI injections.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
DataEase
Published
2025-08-25
Last Modified
2026-02-24
References
https://github.com/dataease/dataease/security/advisories/GHSA-7r8j-6whv-4j5p https://github.com/dataease/dataease/commit/8d04e92d44e1bac9284e9e64df5afd7f96d9373c https://nvd.nist.gov/vuln/detail/CVE-2025-57773
Patch
https://github.com/dataease/dataease/releases
Share on: