THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-7299 (MEDIUM 6.3) — A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7

[NVD] CVE-2023-7299 (MEDIUM 6.3) — A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7

lownvdPublished 2024-11-23

CVE-2023-7299 CVSS: 6.3 MEDIUM Published: 2024-11-23T13:15:04.547

A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7.0 is able to address this issue. It is recommended t

Indicators of compromise

CVE-2023-7299cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-7299