CVE-2023-41314 Apache Doris: Missing API authentication allowed DoS

2023-12-1808:27:51

CWE-863

apache

raw.githubusercontent.com

cve-2023-41314

apache doris

unauthenticated access

dos

upgrade 2.0.3

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

JSON

The api /api/snapshot and /api/get_log_file would allow unauthenticated access.
It could allow a DoS attack or get arbitrary files from FE node.
Please upgrade to 2.0.3 to fix these issues.