Advisories · Technology
Apache Software Foundation Apache Doris.
Every CVE that names Apache Software Foundation Apache Doris among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Apache Doris: JDBC driver URL validation bypass leads to remote code execution
- Apache Software Foundation Apache Doris
- CWE-829
- CVSS 7.5 High
Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
- Apache Software Foundation Apache Doris
- Authentication bypass
- CVSS 6.5 Medium
Apache Doris: Authorization bypass leading to unauthorized data access
- Apache Software Foundation Apache Doris
- Broken access control
- CVSS 8.8 High
Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables
- Apache Software Foundation Apache Doris
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Doris: Improper Authentication in Frontend HTTP API
- Apache Software Foundation Apache Doris
- Authentication bypass
- CVSS 5.4 Medium
Apache Doris: allows admin users to read arbitrary files through the REST API
- Apache Software Foundation Apache Doris
- Path traversal
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution
- Apache Software Foundation Apache Doris
- CWE-494
- CVSS 5.3 Medium
Apache Doris: Possible race condition
- Apache Software Foundation Apache Doris
- Race condition
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Doris: Timing Attack weakness
- Apache Software Foundation Apache Doris
- CWE-208
-
Apache Doris: Missing API authentication allowed DoS
- Apache Software Foundation Apache Doris
- Broken access control