## DataEase DB2 SSRF Vulnerability ### Package - Maven: io.dataease (Maven) ### Affected Versions - <= 2.10.14 ### Patched Versions - 2.10.15 ### Severity - High ### CVE ID - CVE-2025-64163 ### Descri…

Fix: JDBC URL Parameter Injection in Db2/Impala Drivers

github.com · 2025-09-16

From this webpage screenshot, the following key vulnerability-related information can be obtained: - **Vulnerability Fixed**: The commit message states “Fix: 修复漏洞” (Fix: Fix vulnerability), indicating…

DataEase SQL Injection Vulnerability Fix Analysis

github.com · 2025-08-27

From this webpage screenshot, the following key information about the vulnerability can be obtained: - **Vulnerability Type**: SQL Injection (SQLi) - **Remediation Measures**: - Added input parameter …

DataEase JDBC Connection Parameter Bypass Vulnerability (CVE-2023-28065) Analysis

github.com · 2025-07-06

### Key Information #### Vulnerability Name DataEase PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability #### Affected Scope - **Affected Versions**: <= 2.10.10 - **Fixed…

DataEase H2 JDBC Deserialization RCE Vulnerability (CVE-2021-42392) Analysis

github.com · 2025-07-06

From this webpage screenshot, the following key information about the vulnerability can be obtained: ### Vulnerability Overview - **Vulnerability Name**: Dataease H2 JDBC Connection Remote Code Execut…

DataEase Redshift SSRF Fix: Blocking socketFactory Parameters

github.com · 2025-06-05

From this webpage screenshot, the following key information about the vulnerability can be obtained: - **Submission Details**: - Submission ID: `03b18db` - Submitters: `jinlong-T` and `tjlydx` - Submi…

DataEase CVE-2023-47153 Arbitrary File Read via JDBC

github.com · 2025-06-05

### Key Information #### Vulnerability Description - **Vulnerability Name**: DataEase Mysql JDBC Connection Parameters Not Verified Leads to Arbitrary File Read Vulnerability - **CVE ID**: CVE-2023-47…

DataEase JWT Signature Verification Bypass (<=2.10.1)

github.com · 2024-11-11

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. **Vulnerability Description**: - **Impact**: Due to the lack of JWT token signature verification…

DataEase Fix for Illegal Parameter Injection in PostgreSQL JDBC Connection String

github.com · 2024-10-12

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. **Code Changes**: - The code changes occurred in the file `core/backend/src/main/java/io/dataease…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 18+