Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/03/02 8:27 p.m.•24 views

CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

Impact The Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose vulnerability to SQL injection when target schema change. Patches Yes, it's fix...

9.8CVSS5.9AI score0.00516EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/03/02 8:27 p.m.•10 views

GHSA-59G6-V3VG-F7WC CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

Impact The Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose vulnerability to SQL injection when target schema change. Patches Yes, it's fix...

9.3CVSS6AI score0.00516EPSS
SaveExploits0References4
Rows per page
Query Builder