An unauthenticated SQL injection vulnerability in Tiandy Integrated Management Platform 7.17.0 allows remote attackers to compromise backend database integrity.

This is a SQL injection flaw (CWE-89) located in the /rest/user/getAuthorityByUserId file. It allows an unauthenticated remote attacker to manipulate the userId argument to execute arbitrary SQL commands.

The ability to perform SQL injection allows an attacker to bypass authentication, access sensitive user data, or potentially modify database contents. With a CVSS score of 7.3, this represents a high-severity risk that could lead to unauthorized data exposure and loss of confidentiality for the management platform.

Immediate Action: Since the vendor has not provided a patch, restrict network access to the management interface immediately and implement strict input validation at the Web Application Firewall level.

Proactive Monitoring: Monitor database query logs for syntax errors, unexpected union selects, or abnormal traffic patterns originating from the /rest/user/getAuthorityByUserId endpoint.

Compensating Controls: Deploy WAF rules specifically designed to detect and block SQL injection payloads targeting the userId parameter in REST API requests.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the technical write-up referenced by the CVE record.

Given the public disclosure of the exploit and the lack of a vendor-provided patch, this vulnerability poses a significant risk to organizations utilizing Tiandy Integrated Management Platform. Administrators must prioritize network segmentation and WAF-based filtering to mitigate the risk until an official update is released.