Back to search
CVE-2025-48998
Published: Jun 3, 2025
Modified: Jun 3, 2025
PUBLISHED
Description
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
| Vendor | Product | Versions |
|---|---|---|
dataease | dataease | affected < 2.10.10 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now