Skip to content

Known CVE

DataEase < 2.10.10 - JWT Authentication Bypass

DataEase < 2.10.10 contains a broken authentication caused by ineffective secret verification, letting users forge JWT tokens, exploit requires no special privileges.

CVE-2025-49001

Critical2025CVSS 9.8CWE-287

cve2025 · dataease · auth-bypass · jwt · unauth

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website