Apache Drill vulnerabilities

• apache drill Apache Drill: XXE Vulnerability in XML Format Reader CVE-2023-48362 Fix available 8.8 HighJuly 24, 2024
• apache software foundation airflow spark provider, apache apache-airflow-providers-apache-drill, apache-airflow-providers-apache-spark +2 more Apache Airflow Spark Provider Arbitrary File Read via JDBC CVE-2023-40272 Fix available 7.5 HighAugust 17, 2023
• apache software foundation airflow drill provider, apache apache-airflow-providers-apache-drill +1 more Apache Airflow Drill Provider Arbitrary File Read Vulnerability CVE-2023-39553 Fix available 7.5 HighAugust 11, 2023
• apache software foundation airflow drill provider, apache apache-airflow-providers-apache-drill +1 more Airflow Apache Drill Provider Arbitrary File Read Vulnerability CVE-2023-28707 Fix available 7.5 HighApril 7, 2023
• fasterxml jackson-databind, apache drill, debian linux +15 more +17 more Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-14439 Public exploitFix available EPSS 10.8% 7.5 HighJuly 30, 2019
• apache zookeeper, activemq, drill +7 more +9 more Access control bypass in Apache ZooKeeper CVE-2019-0201 Fix available 5.9 MediumMay 23, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-10241 Fix available 6.1 MediumApril 22, 2019
• apache drill Apache Drill vulnerable to Cross-site Scripting CVE-2017-12630 Fix available 5.4 MediumDecember 18, 2017
• jqueryui jquery ui, apache drill, debian linux +3 more +5 more Cross-site Scripting in jquery-ui CVE-2010-5312 Fix available EPSS 18.4% 6.1 MediumNovember 24, 2014