← CVE Intelligence

CVE-2025-46566

Dataease redshift JDBC Connection Remote Code Execution PUBLISHED

Description (CNA)

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9.

Affected (CNA)

Vendor / productVersions
dataease / dataeaseaffected < 2.10.9

CWE

CWE-923, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.