CVE-2022-45685 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2025-8530 elunez eladmin Druid application-prod.yml default credentials

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipulation of the argument...

CVE-2025-7907

The CVE-2025-7907 entry concerns the yangzongzhuan RuoYi project (up to 4.8.1) with a Druid component issue in ruoyi-admin/src/main/resources/application-druid.yml. The vulnerability arises from manipulation that enables use of default credentials, and it is exploitable remotely. Public exploit i...

The vulnerability of the Apache Druid analytical database lies in the redirection of URLs to an unreliable website. This allows attackers to redirect users to arbitrary URL addresses, execute XSS attacks, or perform SSRF attacks.

The vulnerability of the Apache Druid analytical database is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses, perform XSS attacks, or carry out SSRF attacks...

GHSA-2XCR-P767-F3RV Apache Druid vulnerable to Server-Side Request Forgery, Cross-site Scripting, Open Redirect

Severity: medium 5.8 / important Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the...

PT-2025-12331

Apache Druid and Affected Versions Apache Druid versions prior to 31.0.2 and prior to 32.0.1 Description Apache Druid is susceptible to Server-Side Request Forgery SSRF, Cross-Site Scripting XSS, and Open Redirect issues. When the Druid management proxy is used, a specially crafted URL in a reque...

Apache Druid 输入验证错误漏洞

Apache Druid is an American Apache Apache Foundation open source, column-oriented distributed database written in Java. An input validation error vulnerability exists in Apache Druid version 30.0.0 and earlier. An attacker could exploit this vulnerability to read data from other database systems...

UBUNTU-CVE-2023-29839

A Stored Cross Site Scripting XSS vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function...