{"uuid": "591c8ccf-3479-4470-b6a1-1ee409d80d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/pphm_HackerNews/224", "content": "Real-Time Analytics Under Fire: SSRF and XSS Flaw Threatens Data Security\n\nApache Druid, a widely used real-time analytics platform, has been found to contain a significant security flaw\u2014tracked as CVE-2025-27888\u2014that permits attackers to execute Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks. The issue, if left unpatched, could lead to unauthorized network access, data exfiltration, or further compromise of connected systems.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:09.952291Z"}