CVE-2024-41579

Description

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability

Affected Platforms

Weakness Type

CWE-89

References

• https://gist.github.com/nerowander/380707503cfb078cbd6bed9fc9b12ad9
• https://github.com/DTStack/Taier/issues/1184