CVE-2024-48019

Summary

CVE-2024-48019 is a newly disclosed vulnerability affecting Apache Doris. This issue involves an improper limitation of a pathname, allowing external parties to access arbitrary files on the server filesystem through a Path Traversal technique. Application administrators can potentially read sensitive files by exploiting this vulnerability. Users are strongly advised to upgrade to Apache Doris versions 2.1.8, 3.0.3 or later to address this security concern and mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.