CVE-2024-48019

5.4 mediumEPSS 1.0%

Medium (5.4) in apache doris. EPSS 1.0% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to External Parties vulnerability in Apache Doris. Application administrators can read arbitrary files from the server filesystem through path traversal. Users are recommended to upgrade to version 2.1.8, 3.0.3 or later, which fixes the issue.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-552
Published: 2025-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:doris

References

https://lists.apache.org/thread/p70klgmyrgknhn0t195261wvwv5jw6hr
http://www.openwall.com/lists/oss-security/2025/02/04/2

Check your stack JSON