← CVE Intelligence

CVE-2023-41314

Apache Doris: Missing API authentication allowed DoS PUBLISHED

Description (CNA)

The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Dorisaffected 1.2.0 through 2.0.3

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.