CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2024-41579

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

CVE-2024-41579: Improper Neutralization of Special Elements used in an SQL Command

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability...

PT-2024-29451

Name of the Vulnerable Software and Affected Versions DTStack Taier version 1.4.0 Description The issue allows remote attackers to specify the jobName parameter in the listNames function of the console to cause a SQL injection. This can potentially lead to unauthorized access or manipulation of...

CVE-2024-41579

DTStack Taier version 1.4.0 is vulnerable to a SQL injection vulnerability because the jobName parameter in the console listNames function is improperly neutralized. This flaw allows remote attackers to manipulate data or gain unauthorized access. To mitigate this risk, it is recommended to disab...

CVE-2023-30867: Improper Neutralization of Special Elements used in an SQL Command

In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters,...

PT-2023-23022

Name of the Vulnerable Software and Affected Versions Streampark versions prior to 2.1.2 Description The issue arises in the Streampark platform when users log in and utilize certain features, specifically those providing name-based fuzzy search functionality for items like job names and role...

CVE-2023-30522

A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter...

CVE-2023-30522

A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter...

CVE-2023-30522: Missing Authorization

A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter...