nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)

org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: OSV:GHSA-V62G-JWJ9-RFVX...

nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)

org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: GHSA-V62G-JWJ9-RFVX...

nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)

org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: MEND:CVE-2023-48362...

Cross-Site Scripting (XSS)

Apache drill-java-exec is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the queryId...

Insecure Cookie Handling

drill-java-exec is vulnerable to insecure cookie handling attacks. The vulnerability exists due to the lack of httpOnly flag in the response cookies, allowing the cookies to be stolen by a third party website...