CVE-2025-27138
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 13, 2025
Updated: Mar 21, 2025
CWE ID 287
CWE ID 863
Summary
CVE-2025-27138 is a vulnerability affecting the DataEase open source business intelligence and data visualization tool. Before version 2.10.6, the authentication in the io.dataease.auth.filter.TokenFilter class contained a flaw that potentially enables unauthorized access. This issue has been remedied in version 2.10.6, and currently, no workarounds exist to mitigate the risk. Users are advised to update to the latest version as soon as possible to protect against potential unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Data Ease
Affected Vendors
- Dataease