CVE-2025-3790: baseweb JSite Apache Druid Monitoring Console index.html access control

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-18 · updated 2026-06-17
Weakness: CWE-266

Description

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

baseweb JSite: 1.0

References

https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md
https://vuldb.com/?ctiid.305613
https://vuldb.com/?id.305613
https://vuldb.com/?submit.554572

Get alerted when CVE-2025-3790 or the next vulnerability affects your stack