A flaw in DTStack Taier 1.4.0 allows a remote attacker to supply a crafted filename to the MultipartFile.getOriginalFilename method in the UploadController.java component. The server resolves that filename with path traversal characters, enabling the uploaded file to be stored outside the intended upload directory. This can result in unintended file placement or overwriting of critical files, potentially exposing sensitive data or facilitating further compromise. The vulnerability is triggered by a normal file upload request and does not require authentication, making it accessible to anyone who can reach the application’s upload service.

DTStack Taier version 1.4.0 is affected. The fix is provided in version 1.5.0; no other product or version information is disclosed.

The CVSS score of 5.1 rates the vulnerability as moderate. EPSS is not available and the artifact is not listed in the CISA KEV catalog, indicating limited current exploitation data. Nonetheless, because the flaw sits in a publicly reachable file upload endpoint, an attacker can exploit it remotely and use the path traversal to place arbitrary files, potentially leading to code execution or denial of service. The likelihood of exploitation remains moderate under the current assessment.