CyberCTF/vulhub-apache-druid-cve-2021-25646

PoC

Vulhub apache-druid/CVE-2021-25646: Apache Druid Embedded JavaScript RCE (CVE-2021-25646), run with Isoloom

view exploit source poc_in_githubauthor CyberCTFpublished 2026-10-08catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-25646UShigh8.8Exploit
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments,…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan