CVE-2025-62422 | DataEase up to 2.10.13 Interface tableField tableName sql injection (GHSA-54m5-xrw4-mv36)

A vulnerability was found in DataEase up to 2.10.13 and classified as critical. The impacted element is an unknown function of the file /de2api/datasetData/tableField of the component Interface. The manipulation of the argument tableName results in sql injection.

This vulnerability is reported as CVE-2025-62422. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.