.. / CVE-2021-25646

Exploit for Apache Druid - Remote Code Execution (CVE-2021-25646)

Description:

Apache Druid is susceptible to remote code execution because by default it lacks authorization and authentication. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server.

Nuclei Template

View the template here CVE-2021-25646.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-25646.yaml
Copy

References:

http://www.openwall.com/lists/oss-security/2021/01/29/6
https://paper.seebug.org/1476/
https://lists.apache.org/thread.html/rfda8a3aa6ac06a80c5cbfdeae0fc85f88a5984e32ea05e6dda46f866%40%3Cdev.druid.apache.org%3E
https://lists.apache.org/thread.html/r64431c2b97209f566b5dff92415e7afba0ed3bfab4695ebaa8a62e5d@%3Cdev.druid.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-25864