CVE-2025-27888

CVE-2025-27888 is a security vulnerability found in Apache Druid versions prior to 31.0.2 and 32.0.1. It is a combination of Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS), and Open Redirect vulnerabilities. When the Druid management proxy is enabled, a specially crafted URL can redirect requests to an arbitrary server. An attacker needs to be authenticated to exploit this flaw. Successful exploitation could lead to redirection to malicious websites, token theft, or cross-site request forgery (XSRF). The management proxy is enabled by default in Druid's default configuration, which magnifies the risk. Users are recommended to upgrade to Druid 31.0.2 or 32.0.1 to mitigate the vulnerability.