Aller au contenu
en Se connecter
Non notée

CVE-2023-48362 XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote…

Description

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Drill 1.19 1.19.0 → < 1.21.2 1.21.2
apache_drill 1.19 1.19.0 → < 1.21.2 1.21.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache Drill

Les 2 CVE de Apache Drill →
CVE-2017-12630 In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or… Non notée
Suivre cette CVE