Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
概要
Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. In a malicious payload, getUrlType() retrieves hostName. Since the judgment statement returns false, it will not enter the if statement and will not be filtered. The payload can be directly concatenated at the replace location to construct a malicious JDBC statement. Version 2.10.10 contains a patch for the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com