PT-2024-27732 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions 5.0.0 and earlier Description: A SpEL Spring Expression Language expression injection issue was found in the Data Viewing interface. This allows for potential malicious activity via the injection of expressions...

Exploit for Injection in Datagear

CVE-2024-37759 PoC Description DataGear version 5.0.0 and...

CVE-2023-2042

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

Deserialization of untrusted data

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.5.1. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2023-2042 DataGear JDBC Server deserialization

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

CVE-2023-2042 DataGear JDBC Server deserialization

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

CVE-2023-2042

CVE-2023-2042 affects DataGear up to versions 4.7.0/5.1.0, with a vulnerability in the JDBC Server Handler that allows deserialization. The available descriptions consistently state remote feasibility and that the exploit has been disclosed publicly. Affected functionality is not precisely detail...

PT-2023-17438 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions up to 4.7.0/5.1.0 Description: A problematic issue has been found in the JDBC Server Handler component of DataGear, allowing for deserialization through manipulation. This issue can be exploited remotely. The vendor was...

DataGear 代码问题漏洞

DataGear is an open source and free data visualization and analysis platform from DataGear, Inc. A code issue vulnerability exists in DataGear versions prior to 4.5.1, which stems from a problem with the component JDBC server handler that can lead to deserialization...

CVE-2023-1772

A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1772 DataGear Diagram Type cross site scripting

A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1772 DataGear Diagram Type cross site scripting

A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1772 DataGear Diagram Type cross site scripting

A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2023-1772

CVE-2023-1772 affects DataGear up to version 4.5.1, impacting the Diagram Type Handler component. The issue is described as enabling cross-site scripting (XSS) with remote initiation, and the exploit is publicly disclosed (VDB-224673). Multiple connected sources corroborate that the vulnerability...

DataGear 跨站脚本漏洞

DataGear is an open source and free data visualization and analysis platform from DataGear, Inc. A security vulnerability exists in DataGear 4.5.1 and earlier versions, which stems from an unknown part of the component Diagram Type Handler, leading to cross-site scripting...

PT-2023-17232 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions up to 4.5.1 Description: A vulnerability was found in the Diagram Type Handler component of DataGear, which can lead to cross site scripting. The manipulation can be initiated remotely. The exploit has been disclosed to the...

CVE-2023-1573

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public a...

Cross site scripting

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public a...

CVE-2023-1573 DataGear Graph Dataset cross site scripting

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public a...

CVE-2023-1573

The CVE-2023-1573 issue affects DataGear up to version 1.11.1, tied to the Graph Dataset Handler. It allows cross-site scripting when processing the component, with remote initiation possible. Exploit information is publicly disclosed. Remediation: upgrade to DataGear 1.12.0 to address the vulner...