CVE-2025-53004 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's Redshift D…
High CVSS: 8.9

CVE-2025-53004

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's Redshift Data Source JDBC Connection Parameters. The sslfactory and sslfactoryarg parameters could trigger a bypass vulnerability. This issue has been patched in version 2.10.11.
Vendor
Dataease
Product
Dataease
CWE
CWE-153
Yayın Tarihi
2025-06-30 21:15:31
Güncelleme
2025-07-10 13:42:12
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-153 Dataease HIGH Dataease 2025

Referanslar

https://github.com/dataease/dataease/security/advisories/GHSA-mfg2-qr5c-99pp https://github.com/dataease/dataease/security/advisories/GHSA-mfg2-qr5c-99pp