Executive brief
Taier is a big data development platform used for data job submission, scheduling, and monitoring. A path traversal vulnerability in the file upload functionality allows attackers to write files outside the intended directory, potentially overwriting system files or injecting malicious content into the application.
Technical details
The vulnerability is a path traversal flaw in the UploadController.java component, specifically in the MultipartFile.getOriginalFilename function. The File parameter is not properly validated, allowing an attacker to craft a malicious filename with path traversal sequences (e.g., ../) to write files to arbitrary locations on the filesystem. The attack is remotely exploitable and does not require authentication. An attacker can exploit this to overwrite critical files, inject code, or cause service disruption. The issue was patched in version 1.5.0 with commit 572773c, which added proper path validation to the file upload handler.
Affected products
- DTStack Taier 1.4.0
Timeline
- 2026-08-14: disclosed
- 2026-08-14: patched: Fixed in version 1.5.0