| Titolo | DataGear datagear <=v5.0.0 Injection |
|---|
| Descrizione | DataGear v5.0.0 has a SpEL expression injection vulnerability leading to remote code execution in the Editing and Deletion functions of the Data Schema Page |
|---|
| Fonte | ⚠️ https://gitee.com/datagear/datagear/issues/IAF3H7 |
|---|
| Utente | nerowander (UID 72513) |
|---|
| Sottomissione | 06/08/2024 04:43 (2 anni fa) |
|---|
| Moderazione | 06/08/2024 08:47 (4 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 273697 [DataGear fino a 5.0.0 Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression escalationi di privilegi] |
|---|
| Punti | 15 |
|---|