CVE-2025-53005 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's PostgreSQL…
High CVSS: 8.9

CVE-2025-53005

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's PostgreSQL Data Source JDBC Connection Parameters. The sslfactory and sslfactoryarg parameters could trigger a bypass vulnerability. This issue has been patched in version 2.10.11.
Vendor
Dataease
Product
Dataease
CWE
CWE-153
Yayın Tarihi
2025-07-01 01:15:28
Güncelleme
2025-07-16 14:43:07
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-153 Dataease HIGH Dataease 2025

Referanslar

https://github.com/dataease/dataease/security/advisories/GHSA-99c4-h4fq-r23v https://github.com/dataease/dataease/security/advisories/GHSA-99c4-h4fq-r23v