CVE-2023-41313

概要

参考情報

• openwall.com/lists/oss-security/2024/03/10/2 · Mailing List
• lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95 · Mailing List

doris のその他の脆弱性

• CVE-2026-58319緊急 9.1Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with networ…
• CVE-2024-48019中 5.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to External Parties vulnerab…
• CVE-2024-27438緊急 9.8Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may r…
• CVE-2024-26307中 5.3Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of someone renaming the…
• CVE-2023-41314高 8.2The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE n…