Cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*

DataGear versions up to 6.0.0 contain an unauthenticated server-side request forgery vulnerability allowing attackers to perform arbitrary internal HTTP requests and exfiltrate response bodies.