SSRF Vulnerability in DataEase Data Visualization Tool
CVE-2025-64163

8.9HIGH

Key Information:

Vendor: Dataease
Status: Dataease
Vendor: CVE Published:; 5 November 2025

What is CVE-2025-64163?

DataEase is an open-source data visualization analysis tool that, in versions up to 2.10.14, lacked proper protection against the dns:// protocol, leading to a Server-Side Request Forgery (SSRF) vulnerability. This flaw arises due to the addition of a blacklist filtering ldap:// and ldaps:// but neglects to secure against dns://. Users should upgrade to version 2.10.15 or later to mitigate this risk effectively.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch