Not rated
CVE-2023-41314 The api /api/snapshot and /api/get_log_file would allow unauthenticated access
Description
The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Doris 1.2 | 1.2.0 → 2.0.3 | No fix stated |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Doris
The 10 CVEs of Apache Doris →
CVE-2026-96443
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution…
Not rated
CVE-2026-31377
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote…
7.5
High
CVE-2026-68570
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
Not rated
CVE-2026-72524
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
Not rated