PT-2024-29451
CVE-2024-41579
·
تاريخ النشر
2024-12-05
·
تاريخ التحديث
2024-12-11
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DTStack Taier version 1.4.0
Description
The issue allows remote attackers to specify the
jobName parameter in the listNames function of the console to cause a SQL injection. This can potentially lead to unauthorized access or manipulation of data.Recommendations
For DTStack Taier version 1.4.0, consider disabling the
listNames function until a patch is available to prevent exploitation of the SQL injection vulnerability. Restrict access to the console to minimize the risk of remote attackers specifying the jobName parameter. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾