漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache Druid Authenticated users can execute arbitrary code from malicious MySQL database systems.
Vulnerability Description
Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Druid server processes. This issue was addressed in Apache Druid 0.20.2
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Druid 安全漏洞
Vulnerability Description
Apache Druid是美国阿帕奇软件（Apache）基金会的一款使用Java语言编写的、面向列的开源分布式数据库。 Apache Druid 0.20.2 存在安全漏洞，攻击者可利用该漏洞可以在Druid服务器的MYSQL进程中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A