DataGear vulnerabilities
We track 5 vulnerabilities in DataGear products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 23, 2024.
Latest DataGear vulnerabilities
- 9.8 Critical severity
DataGear: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgr
- 8.8 High severity
DataGear: Improper Neutralization of Special Elements used in an Expression Language Statement
A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation le
- 9.8 Critical severity
datagear: Improper Neutralization of Special Elements in Output Used by a Downstream Component
DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface.
- 8.8 High severity
DataGear: Deserialization of Untrusted Data
A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched
- 9.8 Critical severity
DataGear: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of the file /analysisProject/pagingQueryData. The manipulation of the argument queryOrder leads to sql injection. It is possible to initiate the