<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: datagear</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-65792: DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.</title><link>https://patchthecve.com/cve/CVE-2025-65792.html</link><guid>https://patchthecve.com/cve/CVE-2025-65792.html</guid><pubDate>Wed, 17 Jun 2026 09:55:55 +0000</pubDate><description>CRITICAL 9.1: DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.</description></item><item><title>CVE-2023-7299: A vulnerability was found in DataGear up to 4.60</title><link>https://patchthecve.com/cve/CVE-2023-7299.html</link><guid>https://patchthecve.com/cve/CVE-2023-7299.html</guid><pubDate>Thu, 03 Sep 2026 02:15:22 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7.0 is able to addres</description></item><item><title>CVE-2024-7552: A vulnerability was found in DataGear up to 5.0.0</title><link>https://patchthecve.com/cve/CVE-2024-7552.html</link><guid>https://patchthecve.com/cve/CVE-2024-7552.html</guid><pubDate>Wed, 17 Jun 2026 08:20:26 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression of the file ConversionSqlParamValueMapper.java of the component Data Schema Page. The manipulation leads to improper neutralization of specia</description></item></channel></rss>