CVE-2026-96443 : 상세 정보

CVE-2026-96443

2026-09-23
09h35 +00:00
A08-Soft and Data Integrity Fail
2026-09-23
17h09 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Apache Doris: JDBC driver URL validation bypass leads to remote code execution

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

참고 자료