CVE-2025-49001
Dataease Authentication Bypass Vulnerability
Résumé
Dataease Authentication Bypass Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov