Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2024/08/06 2:31 p.m.•46 views

CVE-2024-7552 DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

6.5CVSS0.0059EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/06 2:31 p.m.•51 views

CVE-2024-7552

DataGear up to 5.0.0 is affected in the Data Schema Page component, specifically the function evaluateVariableExpression in ConversionSqlParamValueMapper.java. The issue is an improper neutralization of special elements used in an expression language statement, enabling a remote, potentially high...

8.8CVSS7.2AI score0.0059EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/06 2:31 p.m.•24 views

CVE-2024-7552 DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

6.5CVSS7.2AI score0.0059EPSS
SaveExploits1References4
OSV
OSV
•added 2024/08/06 2:31 p.m.•22 views

CVE-2024-7552 DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

5.3CVSS6AI score0.0059EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•1 views

CVE-2024-7552: Improper Neutralization of Special Elements used in an Expression Language Statement

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

8.8CVSS6AI score0.0059EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/06 12:00 a.m.•27 views

PT-2024-38416 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions up to 5.0.0 Description: A critical issue has been found, affecting the evaluateVariableExpression function of the ConversionSqlParamValueMapper.java file in the Data Schema Page component. This issue leads to improper...

8.8CVSS7.4AI score0.0059EPSS
SaveExploits1References7
Rows per page
Query Builder