#Dataease
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-13525
📊 7.7/10
🏢 dataease

📝 DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-13525

#cybersecurity #infosec #cve #euvd
March 20, 2026 at 5:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-82942
📊 7.1/10
🏢 dataease

📝 SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authenticated workspace members to mod...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-82942

#cybersecurity #infosec #cve #euvd
September 22, 2026 at 4:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-44778
📊 7.1/10
🏢 dataease

📝 DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL preview exposes DatasetDataApi.previewSql/previewSqlCheck...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44778

#cybersecurity #infosec #cve #euvd
July 15, 2026 at 9:00 PM
github-trending.bsky.social
📝 Summary:

DataEase is an open-source BI tool that allows users to quickly analyze data and gain insights into business trends. It supports various data sources, offers easy-to-use features like drag-and-drop chart creation, and AI Copilot for natural language interaction. DataEase can be (1/2)
September 7, 2024 at 6:01 PM
cve.skyfleet.blue
CVE-2025-53004 - DataEase SSL Factory Bypass Vulnerability
CVE ID : CVE-2025-53004

Published : June 30, 2025, 9:15 p.m. | 2 hours, 59 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, the ssl...
CVE-2025-53004 - DataEase SSL Factory Bypass Vulnerability
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, the sslfactory and sslfactoryarg parameters could trigger a bypass vulnerability. This issue has been patched in version 2.10.11.
cvefeed.io
July 1, 2025 at 12:50 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-53005 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-53005

dataease - dataease

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-53005
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
July 1, 2025 at 12:48 AM
cve.skyfleet.blue
CVE-2025-27138 - DataEase Unauthenticated Access Vulnerability
CVE ID : CVE-2025-27138

Published : March 13, 2025, 5:15 p.m. | 1 hour, 9 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there...
CVE-2025-27138 - DataEase Unauthenticated Access Vulnerability
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which may cause the risk of unauthorized access. The vulnerability has been fixed in v2.10.6. No known workarounds are available.
cvefeed.io
March 13, 2025 at 8:26 PM
cve.skyfleet.blue
CVE-2025-53006 - DataEase PostgreSQL/Redshift SSL Factory Parameter Injection Vulnerability
CVE ID : CVE-2025-53006

Published : July 2, 2025, 3:15 p.m. | 1 hour, 37 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Pr...
CVE-2025-53006 - DataEase PostgreSQL/Redshift SSL Factory Parameter Injection Vulnerability
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, in both PostgreSQL and Redshift, apart from parameters like "socketfactory" and "socketfactoryarg", there are also "sslfactory" and "sslfactoryarg" with similar functionality. The difference lies in that "sslfactory" and related parameters need to be triggered after …
cvefeed.io
July 2, 2025 at 5:02 PM
cve.skyfleet.blue
CVE-2025-49001 - DataEase JWT Token Forgery Vulnerability
CVE ID : CVE-2025-49001

Published : June 3, 2025, 9:15 p.m. | 1 hour, 15 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret ver...
CVE-2025-49001 - DataEase JWT Token Forgery Vulnerability
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
cvefeed.io
June 4, 2025 at 12:36 AM
cve.skyfleet.blue
CVE-2025-53005 - DataEase PostgreSQL Data Source JDBC Connection Factory Argument Injection Vulnerability
CVE ID : CVE-2025-53005

Published : July 1, 2025, 1:15 a.m. | 59 minutes ago

Description : DataEase is an open source business intelligence and data visualization to...
CVE-2025-53005 - DataEase PostgreSQL Data Source JDBC Connection Factory Argument Injection Vulnerability
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's PostgreSQL Data Source JDBC Connection Parameters. The sslfactory and sslfactoryarg parameters could trigger a bypass vulnerability. This issue has been patched in version 2.10.11.
cvefeed.io
July 1, 2025 at 4:35 AM
deanlj.social
BASIC (Typing in programs from magazines in the early 80's)
C
X86 ASM
SQL (QMF on IBM Mainframe)
DBase/DataEase DQL
Visual Basic
PHP
Javascript
GO
Python
Typescript

Generally only use TS or Python now for AWS CDK IaC
December 30, 2024 at 1:42 PM
cve.skyfleet.blue
CVE-2025-49002 - DataEase Case Insensitive Patch Bypass Vulnerability
CVE ID : CVE-2025-49002

Published : June 3, 2025, 9:15 p.m. | 1 hour, 15 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Versions prior to versio...
CVE-2025-49002 - DataEase Case Insensitive Patch Bypass Vulnerability
DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in v2.10.10. No known workarounds …
cvefeed.io
June 4, 2025 at 12:46 AM
cve.skyfleet.blue
CVE-2025-48998 - DataEase Arbitrary File Deserialization
CVE ID : CVE-2025-48998

Published : June 3, 2025, 7:15 p.m. | 1 hour, 14 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of ...
CVE-2025-48998 - DataEase Arbitrary File Deserialization
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
cvefeed.io
June 3, 2025 at 9:14 PM
cve.skyfleet.blue
CVE-2026-32137 - DataEase SQL Injection Vulnerability
CVE ID : CVE-2026-32137

Published : March 12, 2026, 5:53 p.m. | 33 minutes ago

Description : Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/pr...
CVE-2026-32137 - DataEase SQL Injection Vulnerability
Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/previewData is directly concatenated into the SQL statement without any filtering or parameterization. Since tableName is a user-controllable string, attackers can inject malicious SQL statements by constructing malicious table names. This vulnerability is fixed …
cvefeed.io
March 12, 2026 at 8:12 PM
adamj2048.bsky.social
As a person that first used SQL in the DOS app DataEase, this makes me very happy lol
November 20, 2024 at 1:19 AM
cve.skyfleet.blue
CVE-2025-48999 - DataEase SQL Injection Vulnerability
CVE ID : CVE-2025-48999

Published : June 3, 2025, 9:15 p.m. | 1 hour, 15 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exist...
CVE-2025-48999 - DataEase SQL Injection Vulnerability
DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. In a malicious payload, `getUrlType()` retrieves `hostName`. Since the judgment statement returns false, it will not enter the if statement and will not be filtered. The payload can …
cvefeed.io
June 4, 2025 at 12:32 AM
jackobli.bsky.social
Filemaker war bei uns zum Glück fast kein Thema. Vor Access waren es drölfzig Excel-Makros und noch vorher waren es unzählige DataEase/DBase-Lösungen.
May 1, 2024 at 7:42 AM
mengli512.bsky.social
3 Free Open-Source BI Tools You Might Not Know 🚀

1️⃣ **Superset** (Airbnb) - Python-based, SQL support, rich visuals
2️⃣ **Dash** - Build custom dashboards with Python only
3️⃣ **DataEase** - Drag-and-drop, Chinese-friendly
#DataViz #OpenSource
open.substack.com/pub/pythonli...
Recommend 3 Niche Free BI Visualization Tools
Discover 3 free, open-source BI tools for powerful data visualization—Superset, Dash & DataEase. Perfect for self-service analytics & dashboards!
open.substack.com
April 8, 2025 at 12:00 PM
retronet.bsky.social
The image displays DataEase 4.5, a database management system from the early '90s. It features a text-based interface for signing into databases and managing data. Follow us on X too - @RetroNet42! #retrocomputing #retrosoftware
Image
April 3, 2025 at 11:00 PM
cve.skyfleet.blue
CVE-2025-64163 - DataEase's DB2 is vulnerable to SSRF
CVE ID : CVE-2025-64163

Published : Nov. 6, 2025, 12:15 a.m. | 3 hours, 13 minutes ago

Description : DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a black...
CVE-2025-64163 - DataEase's DB2 is vulnerable to SSRF
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15.
cvefeed.io
November 6, 2025 at 3:56 AM
cve-notifications.incredincomp.com
ID: CVE-2024-56511
CVSS V4.0: CRITICAL
DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause the risk of unauthorized...
#security #infosec #cve-alert
nvd.nist.gov
January 10, 2025 at 4:16 PM
euvd-bot.bsky.social
🚨 EUVD-2026-13541
📊 8.7/10
🏢 dataease

📝 SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-13541

#cybersecurity #infosec #cve #euvd
March 20, 2026 at 6:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-13543
📊 8.6/10
🏢 dataease

📝 SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerabilit...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-13543

#cybersecurity #infosec #cve #euvd
March 20, 2026 at 6:01 AM
dailygithubtrends.bsky.social
今日のGitHubトレンド

1Panel-dev/MaxKB
1Panel-dev/MaxKBリポジトリは、LLM（大規模言語モデル）を活用した知識庫型質問応答システムです。
企業の知識ベースを構築し、質問に対して適切な回答を提供します。
Dockerを用いたインストールや、1Panelアプリストアからの簡単導入、DataEase小助手への組み込みなど、様々な方法で利用できます。
GitHub - 1Panel-dev/MaxKB: 🚀 基于 LLM 大语言模型的知识库问答系统。开箱即用，支持快速嵌入到第三方业务系统，1Panel 官方出品。
🚀 基于 LLM 大语言模型的知识库问答系统。开箱即用，支持快速嵌入到第三方业务系统，1Panel 官方出品。 - 1Panel-dev/MaxKB
github.com
June 22, 2024 at 11:11 AM