Bypass Vulnerability in DataEase Business Intelligence Tool
CVE-2025-53005

8.9HIGH

Key Information:

Vendor

Dataease

Status
Dataease
Vendor
CVE Published:
1 July 2025

What is CVE-2025-53005?

DataEase, an open source business intelligence and data visualization tool, has a bypass vulnerability affecting its PostgreSQL Data Source JDBC Connection Parameters prior to version 2.10.11. The vulnerability is triggered by improperly configured sslfactory and sslfactoryarg parameters, which may allow unauthorized access or manipulation of data. This security issue has been addressed and patched in version 2.10.11.

Affected Version(s)

dataease < 2.10.11

References

https://github.com/dataease/dataease/security/advisories/...
x_refsource_CONFIRM

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-53005 : Bypass Vulnerability in DataEase Business Intelligence Tool