EUVD-2024-24642

Malicious code in bioql PyPI...

EUVD-2024-23578

Malicious code in bioql PyPI...

CVE-2024-48019

Apache Doris is vulnerable to a path traversal vulnerability due to a failure to properly filter special elements in the path of a resource or file. This flaw allows application administrators to read arbitrary files from the server filesystem, specifically through the REST API . To mitigate this...

CVE-2024-27438

Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code...

PT-2024-2423 · Apache · Apache Doris

Name of the Vulnerable Software and Affected Versions: Apache Doris versions 1.2.0 through 2.0.4 Description: The issue is related to the download of code without integrity check in Apache Doris, which may result in remote command execution. An attacker authorized to create a JDBC catalog can use...