CVE-2024-26307

Apache Doris versions prior to 1.2.8 and 2.0.4 are vulnerable to a race condition within the backend storage and frontend request handlers . The issue stems from the use of the chmod() function, where a lack of synchronization when handling shared resources allows an attacker to rename a file dur...

CVE-2024-27438

Apache Doris versions 1.2.0 through 2.0.4 are vulnerable to a Download of Code Without Integrity Check (CWE-494) vulnerability. The root cause is that JDBC driver files used for the JDBC catalog are not checked for integrity. An attacker authorized to create a JDBC catalog can provide an arbitrar...

CVE-2022-23942

CVE-2022-23942 affects Apache Doris versions prior to 1.0.0, where the LDAP password cipher uses a hardcoded key and IV, enabling information disclosure. The issue is exploitable over the network with low attack complexity and no authentication required, compromising confidentiality (per CVSS met...

CVE-2024-48019

Apache Doris is vulnerable to a path traversal vulnerability caused by the software's failure to properly filter special elements in the path of a resource or file. Application administrators can exploit this flaw, specifically through the REST API , to read arbitrary files from the server's file...

CVE-2023-41314

CVE-2023-41314 affects Apache Doris; the vulnerability arises from unauthenticated access to /api/snapshot and /api/get_log_file, potentially enabling DoS and retrieval of arbitrary files from FE nodes. Worldwide references indicate affected product is Doris and advise upgrading to version 2.0.3 ...

CVE-2023-41313

The authentication method in Apache Doris versions prior to 2.0.0 is vulnerable to timing attacks (CWE-208). An attacker could potentially exploit this discrepancy to gain unauthorized access or information. To mitigate this risk, users are recommended to upgrade to version 2.0.0+ or 1.2.8 . Whil...

CVE-2026-58319

CVE-2026-58319 concerns Apache Doris Frontend (FE) HTTP REST administrative APIs that were reachable without authentication. The available data states an unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially compromis...