References https://github.com/dataease/dataease/issues/4798 https://github.com/dataease/dataease/security/advisories/GHSA-7cm3-9pp6-q2fq https://blog.fit2cloud.com/?p=f77897a6-0c63-4aea-8ec1-c447cf2e7173 https://blog.fit2cloud.com/?p=174fbd80-0570-4965-9c9a-4f69bc379caa https://github.com/dataease/dataease/security/advisories/GHSA-2wmv-rr3p-pf43 https://ryze-t.com/2024/05/09/Dataease%E6%BC%8F%E6%B4%9E/ https://dataease.cn/docs/v1/changelog/ https://www.knowsafe.com/ti/info/0/997038
Related VulnerabilitiesPoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path TraversalPoCCVE-2025-49001: DataEase < 2.10.10 - JWT Authentication BypassPoCCVE-2025-32966: DataEase 2.10.4-2.10.7 - Remote Code ExecutionPoCCVE-2025-49002: DataEase - Remote Code Execution飞致云 Dataease 未授权 设计缺陷漏洞DataEase /de2api/datasource/validate 命令执行漏洞(CVE-2025-62420)飞致云 Dataease 需授权 代码注入漏洞飞致云 Dataease 需授权 服务器端请求伪造(SSRF)漏洞飞致云 DataEase 需授权 代码注入漏洞飞致云 Dataease 需授权 SQL注入漏洞