Lucene search
K

4 matches found

NVD
NVD
added 2024/08/06 3:15 p.m.9 views

CVE-2024-7552

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

8.8CVSS0.00152EPSS
Exploits1References4
OSV
OSV
added 2024/08/06 3:15 p.m.9 views

CVE-2024-7552

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

8.8CVSS6.8AI score
Exploits0References4
CVE
CVE
added 2024/08/06 2:31 p.m.22 views

CVE-2024-7552

DataGear up to 5.0.0 is affected in the Data Schema Page component, specifically the function evaluateVariableExpression in ConversionSqlParamValueMapper.java. The issue is an improper neutralization of special elements used in an expression language statement, enabling a remote, potentially high...

8.8CVSS7.2AI score0.00152EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/06 2:31 p.m.13 views

CVE-2024-7552 DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection

A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of...

6.5CVSS7.2AI score0.00152EPSS
Exploits1References4
Rows per page
Query Builder