Approved changes feed: RSS · Atom
cpe:2.3:a:dtstack:taier:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dtstack (4eddf3ad-3dcc-5c27-af89-97f63461cc95) |
|---|---|
| Product | Taier (503893d1-ca3a-5d76-b1fb-293521b06553) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dtstack/taier |
purl2cpe | 2026-06-01 10:16:50.416950 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11618 |
vulnerable | 2026-07-29 00:23:31.510251 |
DTStack Taier Source Connection Test Endpoint LoginInterceptor.java preHandle improper authentication
HIGH (7.3)
A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develop/interceptor/LoginInterceptor.java of the component Source Connection Test Endpoint. Executing a manipulation can lead to improper authentication. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called f95389e7f74acec42bcee079a616aaa06f9551d2. A patch should be applied to remediate this issue.
Published: 2026-06-09T02:15:13.106Z
Updated: 2026-06-09T14:28:48.516Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9437 |
vulnerable | 2026-06-08 08:08:58.964923 |
DTStack Taier REST API Runtime.exec os command injection
MEDIUM (6.3)
A vulnerability has been found in DTStack Taier 1.4.0. This affects the function Runtime.exec of the component REST API. The manipulation of the argument sqlText leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-25T07:15:09.410Z
Updated: 2026-05-26T13:12:46.356Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.