CVE-2024-55081

creationtimestamp| type| source ---|---|--- 2024-12-19 16:21:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113680401219545596 2024-12-19 17:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer7qtvu22 2024-12-19 19:00:07+00:00| seen|...

CVE-2024-55081

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...

CVE-2024-55081

CVE-2024-55081 describes an XML External Entity (XXE) injection in the Chat2DB 0.3.5 component /datagrip/upload that can lead to arbitrary code execution when a crafted XML input is supplied. Affected software: Chat2DB v0.3.5; vulnerable part: /datagrip/upload; root cause: XXE vulnerability. Impa...