CVE-2025-64164
DataEase is vulnerable to Oracle JNDI Injection
Résumé
DataEase is vulnerable to Oracle JNDI Injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection (Java Naming and Directory Interface injection). This issue is fixed in version 2.10.15.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com