CVE-2021-44791 — Reflected XSS on certain HTTP endpoints
In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute refle…
Published: 2022-07-07 · CVSS: Unscored
In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7