CVE-2024-55081

creationtimestamp| type| source ---|---|--- 2024-12-19 16:21:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113680401219545596 2024-12-19 17:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer7qtvu22 2024-12-19 19:00:07+00:00| seen|...

CVE-2024-55081

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...

CVE-2024-55081

Chat2DB version v0.3.5 is affected by an XML External Entity (XXE) injection vulnerability in the /datagrip/upload component. An attacker can supply a crafted XML input to achieve arbitrary code execution . To mitigate this risk, it is recommended to disable the /datagrip/upload component and res...