Apache Drill
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_drill:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Drill (944ab556-2d5c-50c2-b080-ae83c825e030) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48362 |
vulnerable | 2026-06-08 06:14:27.011248 |
Apache Drill: XXE Vulnerability in XML Format Reader
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file.
Users are recommended to upgrade to version 1.21.2, which fixes this issue.
Published: 2024-07-24T07:45:43.686Z
Updated: 2025-02-13T17:18:17.319Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12630 |
vulnerable | 2026-06-08 05:08:47.414373 |
Details available
In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards.
Published: 2017-12-18T14:00:00.000Z
Updated: 2024-09-16T20:16:31.531Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.