A vulnerability classified as problematic has been found in Apache Druid up to 30.0.0. Affected is an unknown function of the component druid-pac4j. The manipulation leads to an unknown weakness.

This vulnerability is traded as CVE-2024-45384. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.