Vendor
StarRocks
3 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.5
StarRocks Query Detail Endpoint Returns Every User's Query History
StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling da…
-
Medium 5.3
StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP po…