CVE-2026-53751

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24

Description DataEase is an open source data visualization and analysis tool. The H2 database JDBC URL validation logic can be bypassed using special Unicode characters. This occurs because the case-conversion behavior of these characters differs between the validation process in DataEase and the parsing process in H2. This discrepancy allows attackers to smuggle dangerous parameters, such as init, within malicious H2 JDBC connection strings to achieve arbitrary code execution.

Recommendations Update to version 2.10.24.