Executive brief
Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters
Affected products
- Maven org.apache.druid:druid
Junglewise Threat Intelligence
CVE-2021-44791: Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters
CVE-2021-44791 · Severity: low · CVSS 3.1 · Published 2022-07-08
Technologies: org.apache.druid:druid (Maven). Vendors: Maven.