{"action":"Upgrade org.apache.druid:druid to 0.17.1 or later.","affected":[{"fixed":"0.17.1","introduced":"0.17.0"}],"component":"org.apache.druid:druid","cve_ids":["CVE-2020-1958"],"ecosystem":"Maven","epss":0.04565,"exploited":false,"fixed_versions":["0.17.1"],"ghsa_id":"GHSA-qh2g-7h5p-mxf4","id":"tcs_01M5N99J1T5TX7Y4W215SJZA32","modified_at":"2023-11-08T04:02:47.246021Z","published_at":"2022-02-09T22:05:39Z","references":["https://osv.dev/vulnerability/GHSA-qh2g-7h5p-mxf4","https://nvd.nist.gov/vuln/detail/CVE-2020-1958","https://github.com/apache/druid/pull/9600#issuecomment-607497875","https://github.com/apache/druid/commit/dbaabdd24710fef726c5730c609937706f456a44#diff-fab6b7a8a160a405e787690201aade5462961550c97715ab18de6ad07a3edf7e","https://lists.apache.org/thread.html/r026540c617d334007810cd8f0068f617b5c78444be00a31fc1b03390@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r1526dbce98a138629a41daa06c13393146ddcaf8f9d273cc49d57681@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r1c32c95543d44559b8d7fd89b0a85f728c80e8b715685bbf788a15a4@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r47c90a378efdb3fd07ff7f74095b8eb63b3ca93b8ada5c2661c5e371@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r75e74d39c41c1b95a658b6a9f75fc6fd02b1d1922566a0ee4ee2fdfc@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r9d437371793b410f8a8e18f556d52d4bb68e18c537962f6a97f4945e%40%3Cdev.druid.apache.org%3E","https://lists.apache.org/thread.html/rf70876ecafb45b314eff9d040c5281c4adb0cb7771eb029448cfb79b@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/rffabc9e83cc2831bbee5db32b3965b84b09346a26ebc1012db63d28c@%3Ccommits.druid.apache.org%3E"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qh2g-7h5p-mxf4","url":"https://osv.dev/vulnerability/GHSA-qh2g-7h5p-mxf4"}],"summary":"Credentials bypass in Apache Druid"}