CVE-2025-27888

mediumPriorität · verfolgen · 23EPSS 0.018 · 78. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.79% (78th) EPSS

CVSS 5.4 · medium

Is it mine?

7 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

Severity: medium (5.8) / important Server-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected. Users are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.3 · Auswirkung 2.7

v3.16.3mediumAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:Nsecondary · OSV

v4.05.8mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:L/SA:Nsecondary · ENISA EU

v4.05.8mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · security@apache.org

v4.04.8mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-601USCWE-601USCWE-601USCWE-79USCWE-79USCWE-79USCWE-918USCWE-918USCWE-918US

betroffene Produkte (7)

Betroffene Produkte und Versionsbereiche.

Apache Software Foundation Apache Druid≤ 32.0.0enisa_euvdEU
Apache Software Foundation Apache Druid0 → 31.0.2enisa_euvdEU
Apache Software Foundation Druid≤ 31.0.2fstec_bduRU
Apache Software Foundation Druid≤ 32.0.1fstec_bduRU
apache druid< 31.0.2nvdUScpe:2.3:a:apache:druid:*:*:*:*:*:*:*:*
Maven org.apache.druid:druid< 31.0.2osvUSpkg:maven/org.apache.druid/druid
Maven org.apache.druid:druid32.0.0 → 32.0.1osvUSpkg:maven/org.apache.druid/druid

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-2xcr-p767-f3rvApache Druid vulnerable to Server-Side Request Forgery, Cross-site Scripting, Open Redirect2025-03-20ghsa · osvUS
Severity: medium (5.8) / important Server-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid. This issue affects all previous Druid versions. When using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected. Users are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd osv NVD CVE.org MITRE

veröffentlicht 2025-03-20geändert 2026-06-17

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

http://www.openwall.com/lists/oss-security/2025/03/19/7 cnnvd
https://access.redhat.com/security/cve/cve-2025-27888 cnnvd
https://lists.apache.org/thread/c0qo989pwtrqkjv6xfr0c30dnjq8vf39 cnnvd
https://lists.apache.org/thread/c0qo989pwtrqkjv6xfr0c30dnjq8vf39 enisa_euvd
http://www.openwall.com/lists/oss-security/2025/03/19/7Mailing ListThird Party Advisorynvd
https://lists.apache.org/thread/c0qo989pwtrqkjv6xfr0c30dnjq8vf39Issue TrackingMailing ListVendor Advisorynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan