CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData: Schwachstelle zum Lesen beliebiger Dateien Code By: Junsheng @ Orange Cybersecurity Labor Orange Cybersecurity Labor https://0range.team/ 0x00 Risikoübersicht Dieses Tool ist nur für autorisierte Sicherheitstests bestimmt. Nicht autorisierte illegale Angriffe...

apache_druid_CVE-2021-36749

apachedruidCVE-2021-36749 CVE-2021-36749 Docker Riproduzione della vulnerabilità Importa l'immagine Docker: docker import apachedruid.tar apache:1 Avvia Docker: docker run -id --name apachedruid -p 8081:8081 -p 8082:8082 -p 8083:8083 -p 8888:8888 -p 8091:8091 -p 2181:2181 IDimmagine /bin/bash Ent...

Exploit for Incorrect Authorization in Apache Druid

CVE-2021-36749 Apache Druid 任意文件读取 受影响版本：version = 0.21.1 使...

CVE-2021-36749

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...

CVE-2021-36749

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...

CVE-2021-36749 Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...