CVE-2022-28889

4.3MEDIUM

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

公開日: 7/7/2022更新日: 11/21/2024
NVDで表示MITREで表示

説明

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

AI分析AIによる分析

影響を受ける製品

apachedruid

参照