-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability description and associated resources indicate the issue resides in the management proxy's handling of crafted URLs, but no specific function names or code locations are disclosed in the provided materials. The advisory references fixed versions but lacks commit diffs or patch details that would reveal exact vulnerable functions. While the vulnerability manifests through SSRF, XSS, and Open Redirect patterns in proxy request handling, the absence of technical implementation details prevents confident identification of specific functions. The management proxy component is clearly implicated, but without code context or changelog details, we cannot reliably map to concrete function implementations.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.druid:druid | maven | ||
| org.apache.druid:druid | maven |
Ongoing coverage of React2Shell