01 Record

CVE-2026-19761

DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal

MediumPUBLISHEDCNA: VulDB

Base score5.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X

02 Description

DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal

Published: 2026-08-13 23:45Z19 HR AGO
Last updated: 2026-08-14 14:07Z4 HR AGO
Reserved: 2026-08-13
Assigning CNA: VulDB
Record state: PUBLISHED
Severity: Medium (CVSS 5.1)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Weaknesses: CWE-22
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 97b877c1a1a9cc1f8c8788fac14be9d8b0adcd1b929e2b4118fe4771e484c118

VendorProductVersionsPlatforms

DTStackTaier1.4.0—

vuldb.comVDB-389664 | DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversalhttps://vuldb.com/vuln/389664vdb-entrytechnical-description
vuldb.comVDB-389664 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/389664/ctisignaturepermissions-required
vuldb.comCVE-2026-19761 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-19761third-party-advisory
vuldb.comSubmit #868965 | DTStack taier v1.4.0 Path Traversalhttps://vuldb.com/submit/868965third-party-advisory
github.comhttps://github.com/DTStack/Taier/issues/1202issue-tracking
github.comhttps://github.com/DTStack/Taier/commit/572773c4315e23e51e30115151cb091749a8d03epatch
github.comhttps://github.com/DTStack/Taier/releases/tag/v1.5.0patch
github.comhttps://github.com/DTStack/Taier/product