PT-2025-34686 · Dataease · Dataease

Fushuling · Published 2025-08-25 · Updated 2025-08-27 · CVE-2025-57772

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.12

Description: DataEase is an open-source business intelligence and data visualization tool. Prior to version 2.10.12, a H2 JDBC Remote Code Execution (RCE) bypass exists. If the JDBC URL meets specific criteria, the getJdbcUrl method returns the JdbcUrl parameter, bypassing H2’s filtering logic and allowing the specification of the H2 driver for the JDBC connection via "driver":"org.h2.Driver".

Recommendations: Update DataEase to version 2.10.12 or later.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-57772

GHSA-V37Q-VH67-9RQV

Affected Products

Dataease

References · 9

• 🔥 https://github.com/dataease/dataease/security/advisories/GHSA-v37q-vh67-9rqv · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57772.json · Exploit
• https://github.com/dataease/dataease/commit/1644d81dff46272b09570fa1f4a8f83f01f37440 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-57772 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57772 · Vendor Advisory
• https://twitter.com/CCBalert/status/1960714663055757525 · Twitter Post
• https://twitter.com/CVEnew/status/1960027616854884816 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1960148500315877807 · Twitter Post
• https://twitter.com/HunterMapping/status/1960274770320125962 · Twitter Post