提交 #386413: DataGear datagear <=v5.0.0 Injection
| 标题 | DataGear datagear <=v5.0.0 Injection |
|---|---|
| 描述 | DataGear v5.0.0 has a SpEL expression injection vulnerability leading to remote code execution in the Editing and Deletion functions of the Data Schema Page |
| 来源 | ⚠️ https:/ |
| 用户 | nerowander (UID 72513) |
| 提交 | 2024-08-06 04時43分 (2 年前) |
| 管理 | 2024-08-06 08時47分 (4 hours later) |
| 状态 | 已接受 |
| VulDB条目 | 273697 [DataGear 直到 5.0.0 Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression 权限提升] |
| 积分 | 15 |