54 matches found
Apache Drill Exposure Detection
Apache Drill is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Drill is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Drill Exposure Detection', 'description': 'Apache Drill is...
EUVD-2022-5833
Malicious code in bioql PyPI...
EUVD-2024-2417
Malicious code in bioql PyPI...
CVE-2023-48362
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
XML External Entity (XXE) Injection
Apache Drill is vulnerable to XML External Entity XXE Injection. The vulnerability is due to inadequate restriction of external entity references, allowing attackers to access files or execute commands through manipulated XML data...
Apache Drill XML External Entity Injection Vulnerability
Apache Drill is an open source software framework from the American company Apache Apache. Apache Drill 1.19.0 and earlier versions suffer from an XML external entity injection vulnerability that can be exploited by an attacker to read any file on a remote file system or execute commands through ...
nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)
org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: OSV:GHSA-V62G-JWJ9-RFVX...
XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
GHSA-V62G-JWJ9-RFVX XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)
org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: GHSA-V62G-JWJ9-RFVX...
CVE-2023-48362
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
CVE-2023-48362
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
CVE-2023-48362
Apache Drill is vulnerable to an XML External Entity (XXE) injection in its XML Format Plugin . The root cause is the inadequate restriction of external entity references , which allows an attacker to provide a malicious XML file to read arbitrary files from a remote file system or execute system...
CVE-2023-48362
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)
org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: MEND:CVE-2023-48362...
Apache Drill code-related vulnerabilities
Apache Drill is an open source software framework from the American company Apache Apache. Apache Drill 1.19.0 and earlier versions suffer from an XML external entity injection vulnerability that can be exploited by an attacker to read any file on a remote file system or execute commands through ...
PT-2024-13606 · Apache · Apache Drill
Name of the Vulnerable Software and Affected Versions: Apache Drill versions 1.19.0 through 1.21.1 Description: The issue allows a user to read any file on a remote file system or execute commands via a malicious XML file. This is due to an XXE vulnerability in the XML Format Plugin...
CVE-2023-48362: Improper Restriction of XML External Entity Reference
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...