CVE-2021-44791

🗓️ 07 Jul 2022 18:35:16Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 118 Views

Apache Druid 0.22.1 and earlier reflected XSS vulnerabilit

Reporter	Title	Published	Views	Family All 15
attackerkb	CVE-2021-44791	7 Jul 202219:15	–	attackerkb
Tenable Nessus	Apache Druid < 0.23.0 Multiple Vulnerabilities	20 Sep 202300:00	–	nessus
Circl	CVE-2021-44791	7 Jul 202222:15	–	circl
CNNVD	Apache Druid 跨站脚本漏洞	7 Jul 202200:00	–	cnnvd
CNVD	Apache Druid Cross-Site Scripting Vulnerability	11 Jul 202200:00	–	cnvd
Cvelist	CVE-2021-44791 Reflected XSS on certain HTTP endpoints	7 Jul 202218:35	–	cvelist
EUVD	EUVD-2022-6296	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters	8 Jul 202200:00	–	github
Mend	CVE-2021-44791	7 Jul 202218:35	–	mend
NVD	CVE-2021-44791	7 Jul 202219:15	–	nvd

NVD

Vulners

Node

apache druidRange≤0.22.1

[
  {
    "product": "Apache Druid",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "0.22.1",
        "status": "affected",
        "version": "Apache Druid",
        "versionType": "custom"
      }
    ]
  }
]