CVE-2021-25646explotación observada

Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

82Vexday Risk Score

Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.

ssvc Actepss 99%

de la publicación al arma5 días

Publicada en NVD29 ene

1ª PoC+5d

metasploit21 ene

VulnCheck+1018d

probabilidad de explotación

99%top 1% de las CVE

explotación observada

síVulnCheck

9 exploit(s) público(s)

Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process.

Productos afectados

Apache Software Foundation · Apache Druid

PoCs públicas encontradas — 9

vulncheckvulncheck.com/xdb/90e27828c0bfno verificado vulncheckvulncheck.com/xdb/762a40d94ce5no verificado vulncheckvulncheck.com/xdb/ff8ab82ad27ano verificado vulncheckvulncheck.com/xdb/a235c0567568no verificado vulncheckvulncheck.com/xdb/9f5a95435985no verificado vulncheckvulncheck.com/xdb/3b8e94956218no verificado vulncheckvulncheck.com/xdb/133682477372no verificado vulncheckvulncheck.com/xdb/df5ffd94ec72no verificado vulncheckvulncheck.com/xdb/8c7ff756c119no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias