Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to External Parties vulnerability in Apache Doris.
Application administrators can read arbitrary
files from the server filesystem through path traversal.
Users are recommended to upgrade to version 2.1.8, 3.0.3 or later, which fixes the issue.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2025/02/04/2 | Mailing List Vendor Advisory |
| https://lists.apache.org/thread/p70klgmyrgknhn0t195261wvwv5jw6hr | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Jun 2025, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apache
Apache doris |
|
| CPE | cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:* | |
| References | () http://www.openwall.com/lists/oss-security/2025/02/04/2 - Mailing List, Vendor Advisory | |
| References | () https://lists.apache.org/thread/p70klgmyrgknhn0t195261wvwv5jw6hr - Vendor Advisory | |
| CWE | CWE-22 |
07 Feb 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 |
04 Feb 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-04 19:15
Updated : 2025-06-09 19:49
NVD link : CVE-2024-48019
Mitre link : CVE-2024-48019
JSON object : View
Products Affected
apache
- doris
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')