CVE-2025-48998 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows authentic…
High CVSS: 7.3

CVE-2025-48998

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
Vendor
Dataease
Product
Dataease
CWE
CWE-89
Yayın Tarihi
2025-06-03 19:15:39
Güncelleme
2025-06-09 15:13:08
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Dataease HIGH Dataease 2025

Referanslar

https://github.com/dataease/dataease/security/advisories/GHSA-2wfc-qwx7-w692 https://github.com/dataease/dataease/security/advisories/GHSA-v4gg-8rp3-ccjx https://github.com/dataease/dataease/security/advisories/GHSA-2wfc-qwx7-w692