Description
An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input.
Critical · 9.8
CVE-2024-55081
EUVD-2024-52736GHSA-p3g7-98ff-92pp
An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitr…
Published Dec 19, 2024 · Updated Jan 2, 2025 · Assigned by mitre