CVE-2024-41579 - DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability

CRITICAL

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability

Published Dec 5, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.52%

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39330		Advisory
https://gist.github.com/nerowander/380707503cfb078cbd6bed9fc9b12ad9
https://github.com/DTStack/Taier/issues/1184

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 5, 2024

Updated Dec 11, 2024

Reserved Jul 18, 2024

Updated Dec 11, 2024

Status Deferred

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Dec 5, 2024

Updated Dec 11, 2024

Exploited since n/a