| CVE-2026-96443 |
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution…
|
Non notée
|
23 sept. 2026 |
| CVE-2026-31377 |
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote…
|
7.5
Élevée
|
23 sept. 2026 |
| CVE-2026-68570 |
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
|
Non notée
|
14 sept. 2026 |
| CVE-2026-72524 |
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
|
Non notée
|
14 sept. 2026 |
| CVE-2026-58319 |
Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication
|
Non notée
|
14 juil. 2026 |
| CVE-2024-48019 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to…
|
Non notée
|
4 févr. 2025 |
| CVE-2024-27438 |
Download of Code Without Integrity Check vulnerability in Apache Doris
|
Non notée
|
21 mars 2024 |
| CVE-2024-26307 |
Possible race condition vulnerability in Apache Doris
|
Non notée
|
21 mars 2024 |
| CVE-2023-41313 |
The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks
|
Non notée
|
12 mars 2024 |
| CVE-2023-41314 |
The api /api/snapshot and /api/get_log_file would allow unauthenticated access
|
Non notée
|
18 déc. 2023 |