Vulnerabilities > Datagear

DATE CVE VULNERABILITY TITLE RISK
2024-08-06 CVE-2024-7552 Expression Language Injection vulnerability in Datagear
A vulnerability was found in DataGear up to 5.0.0.
network
low complexity
datagear CWE-917
8.8
8.8
2023-04-14 CVE-2023-2042 Deserialization of Untrusted Data vulnerability in Datagear
A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0.
network
low complexity
datagear CWE-502
8.8
8.8
2023-03-31 CVE-2023-1772 Cross-site Scripting vulnerability in Datagear
A vulnerability was found in DataGear up to 4.5.1.
network
low complexity
datagear CWE-79
4.8
4.8
2023-03-22 CVE-2023-1573 Cross-site Scripting vulnerability in Datagear
A vulnerability was found in DataGear up to 1.11.1 and classified as problematic.
network
low complexity
datagear CWE-79
6.1
6.1
2023-03-22 CVE-2023-1571 SQL Injection vulnerability in Datagear
A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0.
network
low complexity
datagear CWE-89
critical
 9.8
9.8
2023-03-22 CVE-2023-1572 Cross-site Scripting vulnerability in Datagear
A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic.
network
low complexity
datagear CWE-79
5.4
5.4