← All credits

ABKing and g0udan from the Security Team of Xiaomi discovered that it was still an issue after CVE-2021-26920.

1 vulnerability record and advisories credit this contributor.

CVE-2021-36749
Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)