CVE-2025-32966

Dataease H2 JDBC Connection Remote Code Execution PUBLISHED

Description (CNA)

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8.

Affected (CNA)

Vendor / product	Versions
dataease / dataease	affected < 2.10.8

CWE

CWE-290

References

https://github.com/dataease/dataease/security/advisories/GHSA-h7hj-4j78-cvc7

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.