CVE-2025-49001 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, s…
High CVSS: 7.7

CVE-2025-49001

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
Vendor
Dataease
Product
Dataease
CWE
CWE-287
Yayın Tarihi
2025-06-03 21:15:22
Güncelleme
2025-06-05 14:07:47
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-287 Dataease HIGH Dataease 2025

Referanslar

https://github.com/dataease/dataease/security/advisories/GHSA-xx2m-gmwg-mf3r https://github.com/dataease/dataease/security/advisories/GHSA-xx2m-gmwg-mf3r