CVE-2022-28889

4.3MEDIUM

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

发布于: 7/7/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

AI分析AI驱动

受影响产品

apachedruid

参考资料