CVE-2025-46566: Dataease redshift JDBC Connection Remote Code Execution
Published May 1, 2025
·Updated
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9.
Affected Software
2 affected components
Dataease DataEase<2.10.9
Dataease DataEase<2.10.9
Event History
May 1, 2025
CVE Published
via MITRE·05:20 PM
Data Sourced
via MITRE·05:20 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Jun 14, 57318
Event
via FIRST·07:26 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-46566?
CVE-2025-46566 has been classified as a critical vulnerability due to its potential for allowing remote code execution.
2
How do I fix CVE-2025-46566?
To remediate CVE-2025-46566, upgrade DataEase to version 2.10.9 or later.
3
Who is affected by CVE-2025-46566?
Authenticated users of DataEase versions prior to 2.10.9 are affected by CVE-2025-46566.
4
What type of vulnerability is CVE-2025-46566?
CVE-2025-46566 is a remote code execution vulnerability.
5
When was CVE-2025-46566 published?
CVE-2025-46566 was published in 2025.