5 matches found
CVE-2024-41579
DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...
CVE-2024-41579
creationtimestamp| type| source ---|---|--- 2024-12-05 19:19:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113601830925351923 2024-12-05 22:03:13+00:00| seen| https://t.me/cvedetector/12133...
CVE-2024-41579
DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...
CVE-2024-41579
DTStack Taier version 1.4.0 is vulnerable to a SQL injection vulnerability because the jobName parameter in the console listNames function is improperly neutralized. This flaw allows remote attackers to manipulate data or gain unauthorized access. To mitigate this risk, it is recommended to disab...