Apache Drill (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-24. Vendor: Apache Software Foundation.

CVEs of Apache Drill

• CVE-2023-48362 - CVSS 9.8 (critical), 2024-07-24: XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a…
• CVE-2017-12630 - CVSS 5.4 (medium), 2017-12-18: In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page…