Access Control Vulnerability in WeiYe-Jing DataX-Web Software by WeiYe-Jing
CVE-2025-13250

5.3MEDIUM

Key Information:

Vendor

Weiye-jing

Status
Datax-web
Vendor
CVE Published:
16 November 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-13250?

A vulnerability has been identified in WeiYe-Jing DataX-Web software, where improper access control mechanisms within the Job Handler component can be exploited. This vulnerability allows an attacker to remotely manipulate various job functions, including starting and stopping jobs, which may lead to unauthorized access. The flaw affects all versions up to 2.1.2 and poses a significant risk as it is publicly exploitable, urging immediate attention for users of the affected software.

Affected Version(s)

datax-web 2.1.0

datax-web 2.1.1

datax-web 2.1.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-13250 - Proof of Concept

References

https://vuldb.com/?id.332584
vdb-entrytechnical-description
https://vuldb.com/?ctiid.332584
signaturepermissions-required
https://vuldb.com/?submit.687604
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

sh7err (VulDB User)
JSON
.
CVE-2025-13250 : Access Control Vulnerability in WeiYe-Jing DataX-Web Software by WeiYe-Jing