CVE-2022-28889

4.3MEDIUM

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

게시됨: 7/7/2022업데이트됨: 11/21/2024
NVD에서 보기MITRE에서 보기

설명

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

AI 분석AI 기반

영향받는 제품

apachedruid

참조