CVE-2024-55081

creationtimestamp| type| source ---|---|--- 2024-12-19 16:21:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113680401219545596 2024-12-19 17:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer7qtvu22 2024-12-19 19:00:07+00:00| seen|...

CVE-2024-55081

Chat2DB version v0.3.5 is vulnerable to an XML External Entity (XXE) injection flaw in the /datagrip/upload component. An attacker can exploit this by supplying a crafted XML input to execute arbitrary code . As a temporary workaround, it is recommended to disable the /datagrip/upload component ,...

CVE-2024-55081

An XML External Entity XXE injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input...