CVE-2017-12630 | BDVDB-2026-94187 Detail

ApacheApache Drill

Description#

In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.apache.org/thread.html/608658a55d09e16542db41121a0a972c97448214cdc04071fd4db923%40%3Cdev.drill.apache.org%3E

Exploit#

No public exploit known

History#

Version 12017-12-18Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.