CVE-2026-96443:詳細資料

CVE-2026-96443

2026-09-23
09h35 +00:00
A08-Soft and Data Integrity Fail
2026-09-23
17h09 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Apache Doris: JDBC driver URL validation bypass leads to remote code execution

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

參考資料