Skip to content

Access Control: Apache Druid - Remote Code Execution (Apache Log4j)

Identifier: apache_druid_log4j

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner

Description

Apache Druid is vulnerable to RCE due to Log4j.

Configuration

Example

Example configuration:

---
security_tests:
  apache_druid_log4j:
    skip: false

Reference

skip

Type : boolean

Skip the test if true.