DataGear平台 存在远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adysec/POC/blob/main/wpoc/DataGear/DataGear%E6%95%B0%E6%8D%AE%E5%8F%AF%E8%A7%86%E5%8C%96%E5%88%86%E6%9E%90%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8SpEL%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-37759).md
• https://blog.csdn.net/jd_cx/article/details/148051055
• https://avd.aliyun.com/detail?id=AVD-2023-7299
• https://cve.imfht.com/detail/CVE-2023-7299
• https://cve.imfht.com/detail/CVE-2024-37759
• https://github.com/advisories/GHSA-wh54-vv47-2265
• http://www.datagear.tech/changelog
• https://github.com/datageartech/datagear/issues/13

Related Vulnerabilities

• PoCDataGear /dataSet/resolveSql 代码执行漏洞（CVE-2023-7299）