CVE-2023-48362
Published Jul 24, 2024XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users…
Vendor/product archive
apache / drill CVEs
Beta · best-effort6 CVEs tagged to apache / drill — 0 Critical, 2 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2019-14439
Published Jul 30, 2019A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property)…
CVE-2019-0201
Published May 23, 2019An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the req…
CVE-2019-10241
Published Apr 22, 2019In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL aga…
CVE-2017-12630
Published Dec 18, 2017In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example:…
CVE-2010-5312
Published Nov 24, 2014Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-6 of 6 CVEsPage 1 of 1