Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-48362

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2023-48362
  • Apache » Drill » Version: 1.10.0
    cpe:2.3:a:apache:drill:1.10.0
  • Apache » Drill » Version: 1.11.0
    cpe:2.3:a:apache:drill:1.11.0
  • Apache » Drill » Version: 1.16.0
    cpe:2.3:a:apache:drill:1.16.0
  • Apache » Drill » Version: 1.17.0
    cpe:2.3:a:apache:drill:1.17.0
  • Apache » Drill » Version: 1.18.0
    cpe:2.3:a:apache:drill:1.18.0
  • Apache » Drill » Version: 1.19.0
    cpe:2.3:a:apache:drill:1.19.0
  • Apache » Drill » Version: 1.20.0
    cpe:2.3:a:apache:drill:1.20.0
  • Apache » Drill » Version: 1.20.1
    cpe:2.3:a:apache:drill:1.20.1
  • Apache » Drill » Version: 1.20.2
    cpe:2.3:a:apache:drill:1.20.2
  • Apache » Drill » Version: 1.20.3
    cpe:2.3:a:apache:drill:1.20.3
  • Apache » Drill » Version: 1.21.0
    cpe:2.3:a:apache:drill:1.21.0
  • Apache » Drill » Version: 1.21.1
    cpe:2.3:a:apache:drill:1.21.1
  • Apache » Drill » Version: 1.9.0
    cpe:2.3:a:apache:drill:1.9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved