Apache Apache Drill
2 CVEs affecting Apache Apache Drill. Latest disclosed: 2024-07-24. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48362 | High | 8.8 | 2024-07-24 | XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malici… |
CVE-2017-12630 | Medium | 5.4 | 2017-12-18 | In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page… |