CVE-2023-41313

Publication date

2024-03-12 10:16:23

Family

apache

State

PUBLISHED

Description

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.