CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2024-41579

DTStack Taier 1.4.0 contains a SQL injection vulnerability: remote attackers can influence the jobName parameter in the console listNames function, enabling unauthenticated access to manipulate queries. The underlying issue is an input handling flaw allowing injection. No exploitation specifics a...

CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

Security feature bypass

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2023-29860

DTStack Taier 1.3.0 is affected by CVE-2023-29860. The vulnerability is due to insecure permissions on the /Taier/API/tenant/listTenant interface, which allows an attacker to view sensitive information via the getCookie method. Documented impact is viewing sensitive data; CVSS v3.1 base score is ...

PT-2023-22451 · Dtstack · Dtstack Taier

Name of the Vulnerable Software and Affected Versions: DTStack Taier version 1.3.0 Description: The issue is related to insecure permissions in the "/Taier/API/tenant/listTenant" interface, allowing attackers to view sensitive information via the getCookie method. Recommendations: For DTStack Tai...