CVE-2025-64163 – DataEase’s DB2 is vulnerable to SSRF

CVE ID : CVE-2025-64163

Published : Nov. 6, 2025, 12:15 a.m. | 1 hour, 13 minutes ago

Description : DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15.

Severity: 8.9 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…