CVE-2024-7552

Summary

CVE-2024-7552 is a critical vulnerability affecting DataGear up to version 5.0.0. The issue lies in the evaluateVariableExpression function of ConversionSqlParamValueMapper.java in the Data Schema Page component. This vulnerability results in the improper neutralization of special elements in expression language statements, allowing for remote manipulation. The exploit for this vulnerability, identified as VDB-273697, has been disclosed to the public, increasing the risk of attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.