CVE-2021-25646 PoC — Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

Title:Authenticated users can override system configurations in their requests which allows them to execute arbitrary code. (CVE-2021-25646)
Description:Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process.

Apache Druid remote code execution vulnerability - Apache Druid 远程代码执行漏洞利用 CVE-2021-25646

# Apache Druid 远程代码执行 CVE-2021-25646
by j2ekim

## 使用方法

      python exp.py -u [--url] -c [--command] 
      python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn"

![image](./img1.png)


## 漏洞复现文章
https://www.adminxe.com/2109.html


## 使用需知
由于传播、利用此工具而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。

 [4.0K]  /data/pocs/3a715f4924100d30b8059fcbeb2a7ccc9e18dc23
├── [3.1K]  cve-2021-25646.py
├── [ 40K]  img1.png
└── [ 459]  README.md

0 directories, 3 files