Skip to content
fr Sign in
Not rated

CVE-2024-48019 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to…

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to External Parties vulnerability in Apache Doris. Application administrators can read arbitrary files from the server filesystem through path traversal. Users are recommended to upgrade to version 2.1.8, 3.0.3 or later, which fixes the issue.

Affected products and versions

Product Affected versions Fixed in
Apache Doris 3.0 3.0.0 → < 3.0.3 3.0.3
Apache Doris 2.1 2.1.0 → < 2.1.8 2.1.8

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache Doris

The 10 CVEs of Apache Doris →
CVE-2026-96443 Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution… Not rated CVE-2026-31377 An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote… 7.5 High CVE-2026-68570 Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access… Not rated CVE-2026-72524 Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access… Not rated
Track this CVE