PT-2025-37721 · Amazon+3 · Amazon Redshift+3

Jilinxiangyun-Lab + 1 · Published 2025-09-15 · Updated 2025-09-20 · CVE-2025-58748

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dataease versions prior to 2.10.13

Description Dataease is an open source data analytics and visualization platform. The H2 data source implementation (H2.java) lacks validation to ensure that a provided JDBC URL begins with jdbc:h2. This allows a crafted JDBC configuration to substitute the Amazon Redshift driver and utilize the socketFactory and socketFactoryArg parameters to invoke org.springframework.context.support.FileSystemXmlApplicationContext or ClassPathXmlApplicationContext with a remote XML resource controlled by an attacker, potentially leading to remote code execution.

Recommendations Update to Dataease version 2.10.13 or later.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-58748

GHSA-23QW-9QRH-9RR8

Affected Products

Amazon Redshift

Dataease

H2

Spring Framework

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58748.json · Exploit
• https://github.com/dataease/dataease/security/advisories/GHSA-23qw-9qrh-9rr8 · Vendor Advisory
• https://github.com/dataease/dataease/commit/23a45e72a7abc37d5680b0a7cf691b8df378d4ef · Patch
• https://osv.dev/vulnerability/CVE-2025-58748 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58748 · Security Note
• https://twitter.com/CveFindCom/status/1967629517867843644 · Twitter Post
• https://twitter.com/CVEnew/status/1969292026081317297 · Twitter Post
• https://t.me/CVEtracker/32523 · Telegram Post