This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis →
Q1What is this vulnerability? (Essence + Consequences)
🚨 **Essence**: Apache Druid allows authenticated users to read local files via HTTP InputSource. 💥 **Consequences**: Arbitrary file read (e.g., /etc/passwd), data leakage, potential server compromise.…
🛡️ **Root Cause**: The **HTTP InputSource** in the ingestion system is misconfigured. It allows reading from unintended sources (like local file system) instead of just remote HTTP sources.…
🕵️ **Action**: Hackers can read **any file** accessible by the Druid server process. 📂 **Data**: Local filesystem data (e.g., /etc/passwd, config files).…
🔑 **Threshold**: **Medium**. Requires **Authentication**. ⚙️ **Config**: Users must be able to specify the **HTTP InputSource** in the ingestion task. Not direct privilege escalation, but indirect via app interaction.
Q6Is there a public Exp? (PoC/Wild Exploitation)
💣 **Exploit**: **Yes**, public PoCs exist. 📂 **GitHub**: Multiple repos (e.g., BrucessKING, Jun-5heng) provide curl commands and Python scripts. 🌐 **Wild Exploitation**: Likely, given simple curl-based PoCs.
Q7How to self-check? (Features/Scanning)
🔍 **Check**: Scan for Apache Druid on port **8888**. 🧪 **Test**: Send POST request to `/druid/indexer/v1/sampler?for=connect` with HTTP InputSource pointing to `file:///etc/passwd`.…
🛠️ **Fix**: Upgrade to version **> 0.21.1**. 📢 **Official**: Apache announced the fix in mailing lists (CVE-2021-36749). 🔄 **Status**: Incomplete fix of previous CVE, so patch is critical.
Q9What if no patch? (Workaround)
🚧 **Workaround**: If no patch, **restrict network access** to Druid ingestion endpoints. 🔒 **Auth**: Ensure strong authentication and limit who can submit ingestion tasks.…
🔥 **Urgency**: **High**. 📉 **Risk**: Data leakage is severe. 🚀 **Priority**: Patch immediately if running <= 0.21.1. 📢 **Alert**: Public exploits make this easy to weaponize. Don't ignore!