Apache Software Foundation Polaris vulnerabilities
- apache software foundation polarisApache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials8.1 High
- apache polarisApache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation5.3 Medium
- apache polarisApache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names9.4 Critical
- apache polarisApache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions9.4 Critical
- apache polarisApache Polaris: staged table creation could vend storage credentials for unvalidated locations9.4 Critical
- apache polarisApache Polaris: No protection on `write.metadata.path`9.4 Critical