Security Advisory

CVE-2025-62422

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-17 17:11:06

Last updated 2025-10-17 18:12:21

Assigner GitHub_M

State PUBLISHED

Description

DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in version 2.10.14. No known workarounds exist.

← Browse all CVEs View on cve.org ↗