499 matches found
CVE-2025-27888
Severity: medium 5.8 / important Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the...
CVE-2025-27888 Apache Druid: Server-Side Request Forgery and Cross-Site Scripting
Severity: medium 5.8 / important Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the...
CVE-2025-27888 Apache Druid: Server-Side Request Forgery and Cross-Site Scripting
Severity: medium 5.8 / important Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the...
CVE-2025-27888 Apache Druid: Server-Side Request Forgery and Cross-Site Scripting
Severity: medium 5.8 / important Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the...
CVE-2025-27888
Affected software and issue: Apache Druid with the management proxy enabled is vulnerable to SSRF, XSS, and Open Redirect via specially crafted URLs. Root cause / vulnerability details: When a request is proxied through the Druid management proxy, a crafted URL can redirect to an arbitrary server...
Apache Druid 代码问题漏洞
Apache Druid is an open source, column-oriented, distributed database written in the Java language from the Apache Foundation USA. Apache Druid suffers from a code issue vulnerability that stems from server-side request forgery, cross-site scripting, and open redirects that could lead to XSS or...
PT-2025-12331
Apache Druid and Affected Versions Apache Druid versions prior to 31.0.2 and prior to 32.0.1 Description Apache Druid is susceptible to Server-Side Request Forgery SSRF, Cross-Site Scripting XSS, and Open Redirect issues. When the Druid management proxy is used, a specially crafted URL in a reque...
CVE-2023-34453 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2023-34454 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2023-34455 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2025-23015 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-WMCC-9VCH-JMX4 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-WJXJ-F8RG-99WX vulnerabilities
Vulnerabilities for packages: druid...
CVE-2021-44521 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-8FFC-79XG-29W8 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2018-1320 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-PQR6-CMR2-H8HF vulnerabilities
Vulnerabilities for packages: druid...
GHSA-FJPJ-2G6W-X25R vulnerabilities
Vulnerabilities for packages: druid...
