Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2025-66335

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version...

5.3CVSS5.8AI score0.00116EPSS
Exploits0References1
OSV
OSV
added 2026/04/20 3:31 p.m.2 views

GHSA-QHFQ-GVVC-5Q6Q Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization

Apache Doris MCP Server versions prior to 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Versions 0.6.1...

5.3CVSS5.9AI score0.00116EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/20 1:27 p.m.1 views

CVE-2025-66335

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version...

5.3CVSS6AI score0.00116EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/20 1:27 p.m.24 views

CVE-2025-66335 Apache Doris MCP Server: MCP SQL inject

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version...

0.00116EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/20 1:27 p.m.1 views

CVE-2025-66335 Apache Doris MCP Server: MCP SQL inject

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version...

6AI score0.00116EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/20 12:0 a.m.4 views

Apache Doris MCP Server 安全漏洞

Apache Doris MCP Server is a context-based protocol backend service provided by the Apache Foundation. Versions of Apache Doris MCP Server prior to 0.6.1 contained security vulnerabilities. These vulnerabilities stemmed from improper handling of query contexts, which could lead to the execution o...

5.3CVSS6AI score0.00116EPSS
Exploits0References1
Rows per page
Query Builder