CVE-2025-64428 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for…
High CVSS: 8.9

CVE-2025-64428

Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for version 2.10.14. However, JNDI injection remains possible via the iiop, corbaname, and iiopname schemes. The vulnerability has been fixed in version 2.10.17.
Vendor
Dataease
Product
Dataease
CWE
CWE-74
Yayın Tarihi
2025-11-20 17:15:53
Güncelleme
2025-11-24 14:21:01
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-74 Dataease HIGH Dataease 2025

Referanslar

https://github.com/dataease/dataease/commit/b7e585c1cc3fc2b73cb289b8680b4b3914be3d53 https://github.com/dataease/dataease/releases/tag/v2.10.17 https://github.com/dataease/dataease/security/advisories/GHSA-88ph-3236-2m2h https://github.com/dataease/dataease/security/advisories/GHSA-88ph-3236-2m2h