Description
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DTStack | Taier | 1.4.0 | — |
References
- VDB-389665 | DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal vdb-entry technical-description
- VDB-389665 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-19762 | CVE Analysis and Report third-party-advisory
- Submit #868966 | DTStack taier v1.4.0 path traversal third-party-advisory
- https://github.com/DTStack/Taier/issues/1203 exploit issue-tracking
- https://github.com/DTStack/Taier/ product