Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:31118
HistoryJul 05, 2021 - 3:36 a.m.

Information Disclosure

2021-07-0503:36:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
druid-core
information disclosure
http inputsource

EPSS

0.002

Percentile

51.9%

JSON

druid-core is vulnerable to information disclosure. An attacker is able bypass the application-level restriction and read data from other sources than intended by passing a file URL to the HTTP InputSource.

Related

redhatcve 2
cve 2
prion 2
nessus 2
github 2
cvelist 2
nvd 2
osv 6
nuclei 1
githubexploit 1
redhatcve
redhatcve
CVE-2021-26920
2021-07-06 18:26:55
CVE-2021-36749
2021-09-24 17:31:48
cve
cve
CVE-2021-26920
2021-07-02 08:15:08
CVE-2021-36749
2021-09-24 10:15:07
prion
prion
Privilege escalation
2021-07-02 08:15:00
Privilege escalation
2021-09-24 10:15:00
nessus
nessus
Apache Druid < 0.21.0 Privilege Escalation
2023-09-20 00:00:00
Apache Druid < 0.22.0 Incorrect Authorization
2023-09-20 00:00:00
github
github
Druid ingestion system Authenticated users can read data from other sources than intended
2021-08-13 15:21:50
Druid ingestion system Authenticated users can read data from other sources than intended
2021-09-27 20:13:25
cvelist
cvelist
CVE-2021-26920 Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended
2021-07-02 07:20:13
CVE-2021-36749 Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)
2021-09-24 09:30:11
nvd
nvd
CVE-2021-26920
2021-07-02 08:15:08
CVE-2021-36749
2021-09-24 10:15:07
osv
osv
Druid ingestion system Authenticated users can read data from other sources than intended
2021-08-13 15:21:50
CVE-2021-26920
2021-07-02 08:15:08
CVE-2023-26920
2023-12-12 17:15:07
nuclei
nuclei
Apache Druid - Local File Inclusion
2021-10-25 12:00:48
githubexploit
githubexploit
Exploit for Incorrect Authorization in Apache Druid
2021-10-14 17:30:55

EPSS

0.002

Percentile

51.9%

JSON
Related for VERACODE:31118
redhatcve2cve2prion2nessus2github2cvelist2nvd2osv6nuclei1githubexploit1