CVE-2024-41579

Name of the Vulnerable Software and Affected Versions DTStack Taier version 1.4.0

Description The issue allows remote attackers to specify the jobName parameter in the listNames function of the console to cause a SQL injection. This can potentially lead to unauthorized access or manipulation of data.

Recommendations For DTStack Taier version 1.4.0, consider disabling the listNames function until a patch is available to prevent exploitation of the SQL injection vulnerability. Restrict access to the console to minimize the risk of remote attackers specifying the jobName parameter.