References https://github.com/dataease/dataease/security/advisories/GHSA-8397-v66p-539m https://www.nsfocus.net/vulndb/131888 https://www.cve.org/CVERecord?id=CVE-2025-64163 https://github.com/dataease/dataease/security/advisories/GHSA-fmq3-6xhc-r845
Related VulnerabilitiesPoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path TraversalPoCCVE-2025-49001: DataEase < 2.10.10 - JWT Authentication BypassPoCCVE-2025-32966: DataEase 2.10.4-2.10.7 - Remote Code ExecutionPoCCVE-2025-49002: DataEase - Remote Code Execution飞致云 Dataease 未授权 设计缺陷漏洞DataEase /de2api/datasource/validate 命令执行漏洞（CVE-2025-62420）飞致云 Dataease 需授权 代码注入漏洞飞致云 Dataease 需授权 服务器端请求伪造(SSRF)漏洞飞致云 DataEase 需授权 代码注入漏洞飞致云 Dataease 需授权 SQL注入漏洞