Exploit for CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 By j2ekim...

Metasploit Wrap-Up

Operations shell Operations and management software make popular targets due to their users typically having elevated privileges across a network. Our own wvu contributed the VMware vRealize Operations vROps Manager SSRF RCE exploit module for the vulnerabilities discovered by security researcher...

Apache Druid Remote Code Execution (CVE-2021-25646)

A remote code execution vulnerability exists in Apache Druid. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-25646

creationtimestamp| type| source ---|---|--- 2021-02-05 23:22:52+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/5128 2021-02-06 07:37:08+00:00| published-proof-of-concept| https://t.me/cKure/3868 2021-02-09 12:30:57+00:00| published-proof-of-concept| https://t.me/reconshell/428...

Exploit for CVE-2021-25646

CVE-2021-25646-GUI A small demo impl...

CVE-2021-25646 Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a...

CVE-2021-25646

CVE-2021-25646 affects Apache Druid where an authenticated user can trigger execution of user-provided JavaScript in certain requests. The root cause is improper validation that enables the server to run code with the Druid server process privileges, potentially compromising the host. Affected ve...