CVE-2025-53004 Information
Jul 01, 2025
cve
Description
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11 the sslfactory and sslfactoryarg parameters could trigger a bypass vulnerability. This issue has been patched in version 2.10.11.
Reference
https://github.com/dataease/dataease/commit/dd35752f298b1a4079d9993b622220d321b0c8a6 https://github.com/dataease/dataease/security/advisories/GHSA-mfg2-qr5c-99pp https://github.com/dataease/dataease/security/advisories/GHSA-mfg2-qr5c-99pp
Related CNNVD
CNNVD-202506-3795 (Published: 2025-06-30)
Share on: