CVE-2025-49002
CRITICAL NUCLEIDataEase < 2.10.10 - Authentication Bypass via Case Insensitivity
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-49002. PoCs published by adminlove520, Feng-Huang-0520, jiuzui129-arch. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
Description
DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
Exploits (3)
This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
This repository contains a functional exploit for CVE-2025-49002, targeting a PostgreSQL JDBC bypass vulnerability in DataEase. The PoC sends a crafted HTTP request to the `/de2api/datasource/validate` endpoint with a malicious configuration payload, potentially leading to remote code execution (RCE).
This PoC exploits CVE-2025-49002, a remote code execution vulnerability in DataEase via PostgreSQL JDBC bypass. It sends a crafted JSON payload to the '/de2api/datasource/validate' endpoint, triggering RCE if the target is vulnerable.
Nuclei Templates (1)
http.html:"DataEase"
app="FIT2CLOUD-DataEase"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H