## https://sploitus.com/exploit?id=C598A802-888D-5C28-A03B-FB6C86310037
**Apache Druid Remote Code Execution**
**Vulnerability Summary**
Apache Druid’s official security updates reported a remote code execution vulnerability with the CVE-2021-25646 identifier. Due to the lack of authorization and authentication in Apache Druid by default, attackers can send specially crafted requests, leveraging the privileges of processes on the Druid server to execute arbitrary code. Apache Druid is an open-source, distributed data store designed in Java, aimed at quickly processing large amounts of event data and providing low-latency queries over that data. It is commonly used in business intelligence/OLAP applications to analyze large amounts of real-time and historical data.
**Script Usage**
To use the script, run:
```bash
python3 cve-2021-25646 --help
```
**Detection Method**
Run the following command to check for vulnerabilities:
```bash
python3 cve-2021-25646.py -h http://192.168.130.142:8888
```
To determine whether a vulnerability exists, use the dnslog log system. Modify the script at line 52 to execute a ping to ***.dnslog.* based on your personal dnslog address.
**Disclaimer**
Using the content of this project for illegal purposes shall not be attributed to the author; any consequences are the sole responsibility of the user.