PT-2025-42627 · H2+1 · H2+1

Published 2025-10-17 · Updated 2025-10-17 · CVE-2025-62420

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DataEase versions through 2.10.13

Description DataEase is a data visualization and analytics platform. A JDBC driver bypass exists in the H2 database connection handler. The getJdbc function in H2.java checks if the jdbcUrl starts with jdbc:h2 but uses a separate jdbc field as the actual connection URL. An attacker can provide a jdbcUrl starting with jdbc:h2 while supplying a different jdbc field with an arbitrary JDBC driver and connection string. This allows an authenticated attacker to trigger arbitrary JDBC connections with malicious drivers, potentially leading to remote code execution.

Recommendations Update to DataEase version 2.10.14 or later.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-62420

GHSA-7WCV-J6GC-QC7Q

Affected Products

Dataease

H2

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62420.json · Exploit
• https://github.com/dataease/dataease/security/advisories/GHSA-7wcv-j6gc-qc7q · Vendor Advisory
• https://github.com/dataease/dataease/commit/bb320e42bf2cf862b9c4b438c1517547b53ed67b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-62420 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62420 · Vendor Advisory
• https://t.me/cveNotify/139230 · Telegram Post
• https://twitter.com/CVEnew/status/1979289027388813489 · Twitter Post
• https://t.me/CVEtracker/35204 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1979271643223511175 · Twitter Post