Non notée
CVE-2023-41314 The api /api/snapshot and /api/get_log_file would allow unauthenticated access
Description
The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Doris 1.2 | 1.2.0 → 2.0.3 | Pas de correctif indiqué |
Autres CVE de Apache Doris
Les 10 CVE de Apache Doris →
CVE-2026-96443
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution…
Non notée
CVE-2026-31377
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote…
7.5
Élevée
CVE-2026-68570
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
Non notée
CVE-2026-72524
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
Non notée