Lucene search
PRIOn knowledge basePRION:CVE-2017-12630HistoryDec 18, 2017 - 2:29 p.m.
Design/Logic Flaw
2017-12-1814:29:00
PRIOn knowledge base
www.prio-n.com
1
In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards.
Related
nvd
nvd
CVE-2017-12630
2017-12-18 14:29:00
cve
cve
CVE-2017-12630
2017-12-18 14:29:00
github
github
Apache Drill vulnerable to Cross-site Scripting
2022-05-14 03:53:41
osv
osv
Apache Drill vulnerable to Cross-site Scripting
2022-05-14 03:53:41
veracode
veracode
Cross-site Scripting (XSS)
2017-09-27 07:11:11
cvelist
cvelist
CVE-2017-12630
2017-12-18 00:00:00