Unrated severityNVD Advisory· Published Nov 5, 2025· Updated Nov 6, 2025
DataEase's DB2 is vulnerable to SSRF
CVE-2025-64163
Description
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- github.com/dataease/dataease/commit/869b7fb8b10069ac6c326554bfa8f060a539ba85mitrex_refsource_MISC
- github.com/dataease/dataease/releases/tag/v2.10.15mitrex_refsource_MISC
- github.com/dataease/dataease/security/advisories/GHSA-8397-v66p-539mmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.