CVE-2021-36749

The repository contains a functional Python exploit for CVE-2021-36749, an arbitrary file read vulnerability in Apache Druid. The exploit sends a crafted JSON payload to the Druid sampler endpoint to read files from the target system.

The repository contains a functional Python script that exploits CVE-2021-36749, an arbitrary file read vulnerability in Apache Druid. The exploit sends a crafted POST request to the Druid sampler endpoint, leveraging a misconfigured 'file://' URI to read sensitive files like '/etc/passwd'.

The repository provides instructions for setting up a Docker environment to reproduce CVE-2021-36749 but lacks actual exploit code. It directs users to an external download link for the Docker image, which is a common tactic for suspicious repositories.

This repository contains a functional Python exploit for CVE-2021-36749, an arbitrary file read vulnerability in Apache Druid. The script crafts a malicious HTTP request to the Druid sampler endpoint to read files from the target system, such as /etc/passwd, and saves the output to a local file.

This repository contains a functional Python script that exploits CVE-2021-36749, an arbitrary file read vulnerability in Apache Druid. The exploit sends a crafted HTTP request to the Druid indexer endpoint to read files from the target system, such as /etc/passwd, and saves the output to a local file.