CVE-2023-48362

creationtimestamp| type| source ---|---|--- 2024-07-24 10:47:52+00:00| seen| https://t.me/cvedetector/1553...

CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...

CVE-2023-48362

Apache Drill versions 1.19.0 and greater are vulnerable to an XML External Entity (XXE) injection within the XML Format Plugin . This flaw allows an attacker to read arbitrary files from a remote file system or execute commands by submitting a malicious XML file . To mitigate this risk, users are...

CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...