CVE-2023-29860

DTStack Taier 1.3.0 is affected by CVE-2023-29860. The vulnerability is due to insecure permissions on the /Taier/API/tenant/listTenant interface, which allows an attacker to view sensitive information via the getCookie method. Documented impact is viewing sensitive data; CVSS v3.1 base score is ...