5.3
Medium
CVE-2023-7299 A vulnerability was found in DataGear up to 4.60
Description
A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7.0 is able to address this issue. It is recommended to upgrade the affected component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DataGear | 4.60 | No fix stated |
| DataGear | 4.59 | No fix stated |
| DataGear | 4.58 | No fix stated |
| DataGear | 4.57 | No fix stated |
| DataGear | 4.56 | No fix stated |
| DataGear | 4.55 | No fix stated |
| DataGear | 4.54 | No fix stated |
| DataGear | 4.53 | No fix stated |
| DataGear | 4.52 | No fix stated |
Show the 52 other branches Hide the 52 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| DataGear | 4.51 | No fix stated |
| DataGear | 4.50 | No fix stated |
| DataGear | 4.49 | No fix stated |
| DataGear | 4.48 | No fix stated |
| DataGear | 4.47 | No fix stated |
| DataGear | 4.46 | No fix stated |
| DataGear | 4.45 | No fix stated |
| DataGear | 4.44 | No fix stated |
| DataGear | 4.43 | No fix stated |
| DataGear | 4.42 | No fix stated |
| DataGear | 4.41 | No fix stated |
| DataGear | 4.40 | No fix stated |
| DataGear | 4.39 | No fix stated |
| DataGear | 4.38 | No fix stated |
| DataGear | 4.37 | No fix stated |
| DataGear | 4.36 | No fix stated |
| DataGear | 4.35 | No fix stated |
| DataGear | 4.34 | No fix stated |
| DataGear | 4.33 | No fix stated |
| DataGear | 4.32 | No fix stated |
| DataGear | 4.31 | No fix stated |
| DataGear | 4.30 | No fix stated |
| DataGear | 4.29 | No fix stated |
| DataGear | 4.28 | No fix stated |
| DataGear | 4.27 | No fix stated |
| DataGear | 4.26 | No fix stated |
| DataGear | 4.25 | No fix stated |
| DataGear | 4.24 | No fix stated |
| DataGear | 4.23 | No fix stated |
| DataGear | 4.22 | No fix stated |
| DataGear | 4.21 | No fix stated |
| DataGear | 4.20 | No fix stated |
| DataGear | 4.19 | No fix stated |
| DataGear | 4.18 | No fix stated |
| DataGear | 4.17 | No fix stated |
| DataGear | 4.16 | No fix stated |
| DataGear | 4.15 | No fix stated |
| DataGear | 4.14 | No fix stated |
| DataGear | 4.13 | No fix stated |
| DataGear | 4.12 | No fix stated |
| DataGear | 4.11 | No fix stated |
| DataGear | 4.10 | No fix stated |
| DataGear | 4.9 | No fix stated |
| DataGear | 4.8 | No fix stated |
| DataGear | 4.7 | No fix stated |
| DataGear | 4.6 | No fix stated |
| DataGear | 4.5 | No fix stated |
| DataGear | 4.4 | No fix stated |
| DataGear | 4.3 | No fix stated |
| DataGear | 4.2 | No fix stated |
| DataGear | 4.1 | No fix stated |
| DataGear | 4.0 | No fix stated |
Other CVEs of DataGear
The 8 CVEs of DataGear →
CVE-2026-19110
A vulnerability was determined in DataGear up to 5.0.0
4.8
Medium
CVE-2024-7552
A vulnerability was found in DataGear up to 5.0.0
5.3
Medium
CVE-2023-2042
A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0
5.3
Medium
CVE-2023-1772
A vulnerability was found in DataGear up to 4.5.1
3.5
Low