Package · Maven

org.apache.drill.exec:drill-java-exec

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2023-48362

Apache Drill: XXE Vulnerability in XML Format Reader

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue.

Apache Software Foundation Apache Drill org.apache.drill.exec:drill-java-exec Maven

Jul 24, 2024