Описание
In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| druid | itp | package |
EPSS
Процентиль: 90%
0.05971
Низкий
Связанные уязвимости
CVSS3: 6.1
nvd
больше 3 лет назад
In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.
CVSS3: 6.1
github
больше 3 лет назад
Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters
EPSS
Процентиль: 90%
0.05971
Низкий