Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-16112
HistoryMar 26, 2024 - 12:00 a.m.

Apache Doris Command Execution Vulnerability

2024-03-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
apache doris
mpp
analytic database
jdbc directory
command execution
vulnerability
arbitrary commands
attacker
system

AI Score

7.9

Confidence

High

EPSS

0

Percentile

9.0%

Apache Doris is a modern MPP analytic database product of the U.S. Apache (Apache) Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris has a command execution vulnerability that originates from an unchecked jdbc driver file used by the jdbc directory, which can be exploited by an attacker to execute arbitrary commands on a system.

AI Score

7.9

Confidence

High

EPSS

0

Percentile

9.0%

Related for CNVD-2024-16112