CVE-2023-29860
DTStack Taier 1.3.0 is affected by CVE-2023-29860. The vulnerability is due to insecure permissions on the /Taier/API/tenant/listTenant interface, which allows an attacker to view sensitive information via the getCookie method. Documented impact is viewing sensitive data; CVSS v3.1 base score is ...