Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-62388 State: PUBLISHED Published: 2025-10-13T21:11:34.823Z Last Updated: 2025-11-24T20:30:53.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62389 State: PUBLISHED Published: 2025-10-13T21:11:18.043Z Last Updated: 2025-10-14T13:27:13.446Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62390 State: PUBLISHED Published: 2025-10-13T21:10:53.982Z Last Updated: 2025-10-14T13:30:13.666Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62391 State: PUBLISHED Published: 2025-10-13T21:12:22.188Z Last Updated: 2025-10-14T15:11:50.890Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62392 State: PUBLISHED Published: 2025-10-13T21:10:15.318Z Last Updated: 2025-10-13T23:09:40.176Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62393 State: PUBLISHED Published: 2025-10-23T11:28:25.023Z Last Updated: 2025-10-23T14:18:34.564Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-284 Description: A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62393 - https://bugzilla.redhat.com/show_bug.cgi?id=2404426 - https://moodle.org/mod/forum/discuss.php?d=
y/cve/CVE-2025-62393 - https://bugzilla.redhat.com/show_bug.cgi?id=2404426 - https://moodle.org/mod/forum/discuss.php?d=470381
CVE ID: CVE-2025-62394 State: PUBLISHED Published: 2025-10-23T11:28:27.990Z Last Updated: 2025-10-23T14:14:11.201Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-863 Description: Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62394 - https://bugzilla.redhat.com/show_bug.cgi?id=2404427
CVE ID: CVE-2025-62395 State: PUBLISHED Published: 2025-10-23T11:29:29.299Z Last Updated: 2025-10-23T14:43:09.806Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-284 Description: A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62395 - https://bugzilla.redhat.com/show_bug.cgi?id=2404428
CVE ID: CVE-2025-62396 State: PUBLISHED Published: 2025-10-23T11:28:31.054Z Last Updated: 2025-10-23T14:13:02.325Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-548 Description: An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62396 - https://bugzilla.redhat.com/show_bug.cgi?id=2404429
CVE ID: CVE-2025-62397 State: PUBLISHED Published: 2025-10-23T11:28:33.922Z Last Updated: 2025-10-23T14:12:29.386Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-209 Description: The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62397 - https://bugzilla.redhat.com/show_bug.cgi?id=2404430
CVE ID: CVE-2025-62398 State: PUBLISHED Published: 2025-10-23T11:28:36.897Z Last Updated: 2025-10-24T14:11:10.931Z Problem Types: CWE-287 Description: A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62398 - https://bugzilla.redhat.com/show_bug.cgi?id=2404431
CVE ID: CVE-2025-62399 State: PUBLISHED Published: 2025-10-23T11:28:39.756Z Last Updated: 2025-10-23T14:52:02.496Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-307 Description: Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62399 - https://bugzilla.redhat.com/show_bug.cgi?id=2404432
CVE ID: CVE-2025-62400 State: PUBLISHED Published: 2025-10-23T11:28:43.890Z Last Updated: 2025-10-23T14:48:12.585Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-200 Description: Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62400 - https://bugzilla.redhat.com/show_bug.cgi?id=2404433
CVE ID: CVE-2025-62401 State: PUBLISHED Published: 2025-10-23T11:29:32.189Z Last Updated: 2025-10-23T14:39:05.405Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Problem Types: CWE-285 Description: An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-62401 - https://bugzilla.redhat.com/show_bug.cgi?id=2404434
CVE ID: CVE-2025-62402 State: PUBLISHED Published: 2025-10-30T09:14:27.456Z Last Updated: 2025-10-31T03:55:27.925Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-250 Description: API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/vbzxnxn031wb998hsd7vqnvh4z8nx6rs
CVE ID: CVE-2025-62406 State: PUBLISHED Published: 2025-11-18T22:18:45.747Z Last Updated: 2025-11-19T16:48:47.058Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Piwigo Products: Piwigo Problem Types: CWE-640 Description: Piwigo is a full featured open source photo gallery application for the web. In Piwigo 15.6.0, using the password reset function allows sending a password-reset URL by entering an existing username or email address. However, the hostname used to construct this URL is taken from the HTTP request's Host header and is not validated at all. Therefore, an attacker can send a password-reset URL with a modified hostname to an existing user whose us
dated at all. Therefore, an attacker can send a password-reset URL with a modified hostname to an existing user whose username or email the attacker knows or guesses. This issue has been patched in version 15.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Piwigo/Piwigo/security/advisories/GHSA-9986-w7jf-33f6 - https://github.com/Piwigo/Piwigo/commit/9d2565465efc3570963ff431b45cad21610f6692
CVE ID: CVE-2025-62407 State: PUBLISHED Published: 2025-10-16T17:39:32.903Z Last Updated: 2025-10-16T19:22:52.498Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: frappe Products: frappe Problem Types: CWE-601 Description: Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the redirect argument on the login page, if a specific type of URL was passed in. This vulnerability is fixed in 14.98.0 and 15.83.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/frappe/security/advisories/GHSA-j9jr-qrpj-g855
CVE ID: CVE-2025-62409 State: PUBLISHED Published: 2025-10-16T17:47:25.585Z Last Updated: 2025-10-16T19:22:45.332Z Vendors: envoyproxy Products: envoy Problem Types: CWE-476 Description: Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is still coming, resulting in a buffer watermark callback nullptr reference. The vulnerability impacts TCP proxy and HTTP 1 & 2 mixed use cases based on ALPN. This vulnerability is fixed in 1.36.1, 1.35.5, 1.34.9, and 1.
ts TCP proxy and HTTP 1 & 2 mixed use cases based on ALPN. This vulnerability is fixed in 1.36.1, 1.35.5, 1.34.9, and 1.33.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-pq33-4jxh-hgm3
CVE ID: CVE-2025-62410 State: PUBLISHED Published: 2025-10-15T17:16:21.561Z Last Updated: 2025-10-15T18:16:44.558Z Vendors: capricorn86 Products: happy-dom Problem Types: CWE-1321 Description: In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom. The untrusted script and the rest of the application still run in the same Isolate/process, so attackers can deploy prototype pollution payloads to hijack important references like "process" in the example below, or to hijack control flow via flipping checks of undefined property. This vulnerability is due to an incomplete fix for CVE-2025-61927. The vu
low via flipping checks of undefined property. This vulnerability is due to an incomplete fix for CVE-2025-61927. The vulnerability is fixed in 20.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/capricorn86/happy-dom/security/advisories/GHSA-qpm2-6cq5-7pq5 - https://github.com/capricorn86/happy-dom/commit/f4bd4ebe3fe5abd2be2bcea1c07043c8b0b70eea
CVE ID: CVE-2025-62411 State: PUBLISHED Published: 2025-10-16T17:50:28.184Z Last Updated: 2025-10-16T19:22:04.604Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Transports management functionality. When an administrator creates a new Alert Transport, the value of the Transport name field is stored and later rendered in the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitra
the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitrary JavaScript execution in the admin’s browser. This vulnerability is fixed in 25.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w - https://github.com/librenms/librenms/commit/706a77085f4d5964f7de9444208ef707e1f79450
CVE ID: CVE-2025-62412 State: PUBLISHED Published: 2025-10-16T17:54:09.256Z Last Updated: 2025-10-16T19:21:43.259Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh - https://github.com/librenms/librenms/commit/dccdf6769976a974d70f06a7ce8d
renms/security/advisories/GHSA-6g2v-66ch-6xmh - https://github.com/librenms/librenms/commit/dccdf6769976a974d70f06a7ce8d5a846b29db6f
CVE ID: CVE-2025-62413 State: PUBLISHED Published: 2025-10-16T18:00:17.606Z Last Updated: 2025-10-16T18:36:21.402Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: emqx Products: MQTTX Problem Types: CWE-79 Description: MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A Cross-Site Scripting (XSS) vulnerability was introduced in MQTTX v1.12.0 due to improper handling of MQTT message payload rendering. Malicious payloads containing HTML or JavaScript could be rendered directly in the MQTTX message viewer. If exploited, this could allow attackers to execute arbitrary scripts in the context of the application UI — for example, attempting to access MQTT
ow attackers to execute arbitrary scripts in the context of the application UI — for example, attempting to access MQTT connection credentials or trigger unintended actions through script injection. This vulnerability is especially relevant when MQTTX is used with brokers in untrusted or multi-tenant environments, where message content cannot be fully controlled. This vulnerability is fixed in 1.12.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/emqx/MQTTX/security/advisories/GHSA-29gf-9r9v-j4m3 - https://github.com/emqx/MQTTX/commit/2963f78a4b3227cdb93597f546a75b75dee1059f
CVE ID: CVE-2025-62414 State: PUBLISHED Published: 2025-10-16T18:33:03.900Z Last Updated: 2025-10-17T14:31:54.961Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N) Vendors: bagisto Products: bagisto Problem Types: CWE-80, CWE-87 Description: Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the “Create New Customer” feature (in the admin panel) is vulnerable to Cross-Site Scripting (XSS). An attacker with access to the admin create-customer form can inject malicious JavaScript payloads into certain input fields. These payloads may later execute in the context of an admin’s browser or another user viewing the customer data, enabling session theft
may later execute in the context of an admin’s browser or another user viewing the customer data, enabling session theft or admin-level actions. This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bagisto/bagisto/security/advisories/GHSA-r9xj-mvqf-jm7w
CVE ID: CVE-2025-62415 State: PUBLISHED Published: 2025-10-16T18:36:51.842Z Last Updated: 2025-10-17T14:30:51.605Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N) Vendors: bagisto Products: bagisto Problem Types: CWE-80, CWE-87 Description: Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://githu
er. This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bagisto/bagisto/security/advisories/GHSA-67px-r26w-598x
CVE ID: CVE-2025-62416 State: PUBLISHED Published: 2025-10-16T18:32:55.776Z Last Updated: 2025-10-17T14:32:21.309Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: bagisto Products: bagisto Problem Types: CWE-94, CWE-1336 Description: Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection (SSTI) due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privileges to inject arbitrary template expressions that are evaluated by the backend — potentially leading to Remote Code Execution (RCE) on
rbitrary template expressions that are evaluated by the backend — potentially leading to Remote Code Execution (RCE) on the server. This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bagisto/bagisto/security/advisories/GHSA-527q-4wqv-g9wj
CVE ID: CVE-2025-62417 State: PUBLISHED Published: 2025-10-16T18:32:45.964Z Last Updated: 2025-10-17T14:32:48.820Z Vendors: bagisto Products: bagisto Problem Types: CWE-1236 Description: Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character (for example =, +, -, or @) is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This allows an attacker to supply a CSV field (e.g., product name) that contains a formula which may be evaluated by a victim’s spreadsheet application — potentially leading to data exfiltration and remote command executio
e evaluated by a victim’s spreadsheet application — potentially leading to data exfiltration and remote command execution (via older Excel exploits / OLE/cmd constructs or Excel macros). This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bagisto/bagisto/security/advisories/GHSA-jqrp-58fv-w8cq
CVE ID: CVE-2025-62418 State: PUBLISHED Published: 2025-10-16T18:35:06.105Z Last Updated: 2025-10-17T14:31:21.920Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N) Vendors: bagisto Products: bagisto Problem Types: CWE-80, CWE-87 Description: Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github
r. This vulnerability is fixed in 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bagisto/bagisto/security/advisories/GHSA-fg89-g389-p346
CVE ID: CVE-2025-62419 State: PUBLISHED Published: 2025-10-17T17:11:21.730Z Last Updated: 2025-10-17T17:26:02.585Z Vendors: dataease Products: dataease Problem Types: CWE-502 Description: DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE values are directly concatenated into the JDBC URL without filtering illegal parameters. This allows an attacker to inject a malicious JDBC string into the HOSTNAME field to bypass previously patched vulnerabilitie
allows an attacker to inject a malicious JDBC string into the HOSTNAME field to bypass previously patched vulnerabilities CVE-2025-57773 and CVE-2025-58045. The vulnerability is fixed in version 2.10.14. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-x4x9-mjcf-99r9 - https://github.com/dataease/dataease/commit/bb320e42bf2cf862b9c4b438c1517547b53ed67b
CVE ID: CVE-2025-62420 State: PUBLISHED Published: 2025-10-17T17:11:18.388Z Last Updated: 2025-10-17T17:34:52.863Z Vendors: dataease Products: dataease Problem Types: CWE-502 Description: DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC driver bypass vulnerability exists in the H2 database connection handler. The getJdbc function in H2.java checks if the jdbcUrl starts with jdbc:h2 but returns a separate jdbc field as the actual connection URL. An attacker can provide a jdbcUrl that starts with jdbc:h2 while supplying a different jdbc field with an arbitrary JDBC driver and connection string. This allows an authenticated attacker to trigge
ifferent jdbc field with an arbitrary JDBC driver and connection string. This allows an authenticated attacker to trigger arbitrary JDBC connections with malicious drivers, potentially leading to remote code execution. The vulnerability is fixed in version 2.10.14. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-7wcv-j6gc-qc7q - https://github.com/dataease/dataease/commit/bb320e42bf2cf862b9c4b438c1517547b53ed67b
CVE ID: CVE-2025-62421 State: PUBLISHED Published: 2025-10-17T17:11:14.624Z Last Updated: 2025-10-17T17:52:47.512Z Vendors: dataease Products: dataease Problem Types: CWE-79 Description: DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/{fileId} that uses a URL path parameter where both the filename and extension of uploaded files are controllable by users. During permission validation, the TokenFilter invokes the WhitelistUtils#match method to determine if the URL path is in th
ing permission validation, the TokenFilter invokes the WhitelistUtils#match method to determine if the URL path is in the allowlist. If the requestURI ends with .js or similar extensions, it is directly deemed safe and bypasses permission checks. This allows an attacker to access "upload/1.js" while specifying arbitrary file extensions, enabling the upload of HTML files containing malicious JavaScript. The vulnerability is fixed in version 2.10.14. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-2wmv-rr3p-pf43