CVE-2025-62421: Improper Neutralization of Input During Web Page Generation

DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/fileId that uses a URL path...

PT-2025-42628

Name of the Vulnerable Software and Affected Versions DataEase versions through 2.10.13 Description DataEase is a data visualization and analytics platform. A stored cross-site scripting issue exists because of inadequate file upload validation and authentication bypass. The upload/fileId route...