Search for packages
| purl | pkg:maven/org.apache.drill/drill-common@1.1.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-j9np-nr8n-x7cr
Aliases: CVE-2017-12630 GHSA-xp4g-5xj6-6vpr |
Cross-site Scripting In Apache Drill when submitting a form from the Query page, users are able to pass arbitrary script or HTML which will be rendered or executed on the Profile page. For example, after submitting script code that returns cookie information from the Query page, malicious users may obtain this information from the Profile page. |
Affected by 2 other vulnerabilities. |
|
VCID-mrdq-9pb2-3qb5
Aliases: CVE-2020-13956 GHSA-7r82-7xv7-xcpj |
Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution. |
Affected by 0 other vulnerabilities. |
|
VCID-vaar-ytpp-eqc7
Aliases: CVE-2021-36090 GHSA-mc84-pj99-q6hh |
Uncontrolled Resource Consumption When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||