DIRAC: SQL injection and lack of access control in PilotManager service

Details A number of the functions in PilotManager pass parameters directly through to the database layer, which then does not do any escaping on the parameters. For example setPilotStatus:...

PT-2026-51286

Name of the Vulnerable Software and Affected Versions Pilz PASvisu versions prior to 1.14.1 PMI v8xx versions prior to 2.0.33993 Description A stored cross-site scripting issue exists in the Runtime component. This allows a low-privileged remote unauthenticated attacker to manipulate process data...