{"uuid": "95aad124-2a8b-467c-863e-2e07f0e503ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/pphm_HackerNews/224", "content": "Real-Time Analytics Under Fire: SSRF and XSS Flaw Threatens Data Security\n\nApache Druid, a widely used real-time analytics platform, has been found to contain a significant security flaw\u2014tracked as CVE-2025-27888\u2014that permits attackers to execute Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks. The issue, if left unpatched, could lead to unauthorized network access, data exfiltration, or further compromise of connected systems.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:03.596806Z"}