CVE-2026-96443
2026-09-23
09h35 +00:00
09h35 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Apache Doris: JDBC driver URL validation bypass leads to remote code execution
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Inclusion of Functionality from Untrusted Control Sphere The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere. |
