Security Advisory

CVE-2023-41313

9.8
CRITICAL

Vulnerability Description

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.
Published Date March 12, 2024
Official Source NIST NVD Advisory