CVE-2025-58045 | Dataease up to 2.10.12 JDBC Connection rmi server-side request forgery (GHSA-fmq3-6xhc-r845)

September 15, 2025 Yanac

A vulnerability, which was classified as critical, was found in Dataease up to 2.10.12. Affected by this issue is some unknown functionality of the component JDBC Connection Handler. Such manipulation of the argument rmi leads to server-side request forgery.

This vulnerability is documented as CVE-2025-58045. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More