Product
A vulnerability in iFlytek astron-agent versions up to 1.1.2 allows remote attackers to manipulate the DDL Whitelist Handler via core/memory/database/api/v1/exec_ddl.py due to an incomplete blacklist implementation.