CVE-2023-7299 | DataGear up to 4.60 /dataSet/resolveSql sql sql injection

A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection.

This vulnerability was named CVE-2023-7299. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.