CVE-2025-64163 — DataEase's DB2 is vulnerable to SSRF
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of pro…
Published: 2025-11-05 · CVSS: 8.9 · CVSS 4.0
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7