Apache Druid RCE Vulnerability CVE-2021-25646 Scanner

Stay Up To Date
Asset Type


Need Membership


Asset Verify


API Support


Estimate Time (Second)


Apache Druid RCE Vulnerability CVE-2021-25646 Scanner Detail

Apache Druid is a column-oriented open source distributed data storage written in Java, designed to quickly obtain large amounts of event data and provide low-latency queries on the data.

Apache Druid lacks authorization and authentication by default. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server.

Affected versions:

  • before 0.20.1

Some Advice for Common Problems

Update your Apache Druid to the latest version to eliminate this vulnerability.

Need a Full Assessment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service