PT-2025-11210
CVE-2025-24974
·
Publicado
2025-03-13
·
Atualizado
2025-03-13
Descrição por
CVSS 4.0
8.6
AltaMétricasAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
DataEase versions prior to 2.10.6
Description:
The issue allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. There are no known workarounds available.
Recommendations:
For versions prior to 2.10.6, update to version 2.10.6 to resolve the issue. As a temporary workaround, consider restricting access to the background JDBC connection until the update is applied.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾