CVE-2023-29860 Information

Description

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method.

Reference

https://github.com/DTStack/Taier/issues/1003