Miggo Logo
Miggo Vulnerability Database
→
CVE-2025-27888

CVE-2025-27888:
Apache Druid vulnerable to Server-Side Request Forgery, Cross-site Scripting, Open Redirect

5.8

CVSS Score
4.0

Basic Information

CVE ID
CVE-2025-27888
GHSA ID
GHSA-2xcr-p767-f3rv
EPSS Score
0.15262%
CWE
CWE-79
Published
3/20/2025
Updated
3/21/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.apache.druid:druidmaven
org.apache.druid:druidmaven

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability description and associated resources indicate the issue resides in the management proxy's handling of crafted URLs, but no specific function names or code locations are disclosed in the provided materials. The advisory references fixed versions but lacks commit diffs or patch details that would reveal exact vulnerable functions. While the vulnerability manifests through SSRF, XSS, and Open Redirect patterns in proxy request handling, the absence of technical implementation details prevents confident identification of specific functions. The management proxy component is clearly implicated, but without code context or changelog details, we cannot reliably map to concrete function implementations.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

S*v*rity: m**ium (*.*) / import*nt S*rv*r-Si** R*qu*st *or**ry (SSR*), Improp*r N*utr*liz*tion o* Input *urin* W** P*** **n*r*tion ('*ross-sit* S*riptin*'), URL R**ir**tion to Untrust** Sit* ('Op*n R**ir**t') vuln*r**ility in *p**** *rui*. T*is iss

Reasoning

T** vuln*r**ility **s*ription *n* *sso*i*t** r*sour**s in*i**t* t** issu* r*si**s in t** m*n***m*nt proxy's **n*lin* o* *r**t** URLs, *ut no sp**i*i* *un*tion n*m*s or *o** lo**tions *r* *is*los** in t** provi*** m*t*ri*ls. T** **visory r***r*n**s *i