← CVE Intelligence

CVE-2022-28889

Clickjacking in the web console PUBLISHED

Description (CNA)

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Druidaffected unspecified through 0.22.1

CWE

CWE-1021

References

ADP enrichment

CVE

No English description supplied.