Affordable, manageable, understandable solution for cyber security. Get early access for Product X !
Stay Up To Date
Need Membership


API Support


Estimate Time (Second)


Apache Druid RCE Vulnerability (CVE-2021-25646) Scanner Detail

If you are using Apache Druid, it is better to check your system if any vulnerability exists.

Apache Druid is a column-oriented open source distributed data storage written in Java, designed to quickly obtain large amounts of event data and provide low-latency queries on the data.

Apache Druid lacks authorization and authentication by default. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server.

Affected versions:

  • before 0.20.1

Some Advice for Common Problems

Update your Apache Druid to the latest version to eliminate this vulnerability.

Need a Full Assesment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service