Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-32966

Dataease H2 JDBC Connection Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dataease dataease

  • < 2.10.8affected

References