← Back to browse · API

CVE-2024-37759

Severity

CRITICAL

CVSS

9.8

EPSS

0.0282

Risk score

40.19

CISA KEV

No

PoC

No

Published

2024-06-24

Modified

2024-08-02

First seen

2026-08-08

Aliases

EUVD-2024-36816, GHSA-7GH6-H622-QXJX

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-36816

Description

DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface.

References