Lucene search
MitreCVE-2024-37759HistoryJun 24, 2024 - 9:15 p.m.
CVE-2024-37759
2024-06-2421:15:25
CWE-74
mitre
web.nvd.nist.gov
28
datagear
v5.0.0
spel
injection
vulnerability
data viewing interface
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
EPSS
0
Percentile
9.1%
DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface.
Related
nvd
nvd
CVE-2024-37759
2024-06-24 21:15:25
vulnrichment
vulnrichment
CVE-2024-37759
2024-06-24 00:00:00
cvelist
cvelist
CVE-2024-37759
2024-06-24 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-37759
2024-06-21 02:58:40
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
EPSS
0
Percentile
9.1%
Related for CVE-2024-37759