CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

EUVD-2023-33397

Malicious code in bioql PyPI...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2024-41579: Improper Neutralization of Special Elements used in an SQL Command

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

PT-2024-29451

Name of the Vulnerable Software and Affected Versions DTStack Taier version 1.4.0 Description The issue allows remote attackers to specify the jobName parameter in the listNames function of the console to cause a SQL injection. This can potentially lead to unauthorized access or manipulation of...

CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

Security feature bypass

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

PT-2023-22451 · Dtstack · Dtstack Taier

Name of the Vulnerable Software and Affected Versions: DTStack Taier version 1.3.0 Description: The issue is related to insecure permissions in the "/Taier/API/tenant/listTenant" interface, allowing attackers to view sensitive information via the getCookie method. Recommendations: For DTStack Tai...

CVE-2023-29860: Incorrect Permission Assignment for Critical Resource

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

DTStack Taier 1.3.0 is affected by CVE-2023-29860. The vulnerability is due to insecure permissions on the /Taier/API/tenant/listTenant interface, which allows an attacker to view sensitive information via the getCookie method. Documented impact is viewing sensitive data; CVSS v3.1 base score is ...