Analysis Summary

CVE-2024-48362

Apache Drill could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by improper handling of XML external entity (XXE) declarations by the XML Format Reader. By using a specially crafted XML file, an attacker could exploit this vulnerability to execute arbitrary commands or read arbitrary files on the system.

Impact

• Gain Access

Indicators of Compromise

CVE

• CVE-2024-48362

Affected Vendors

Remediation

Upgrade to the latest version of Apache Drill, available from the Apache Website.

Apache Website