PoC Archive PoC Archive

tag

Threadlocalrandom

Critical
Apache Druid Kerberos Cookie-Signing Secret Recovery via ThreadLocalRandom Seed Inversion (CVE-2025-59390)
CVE-2025-59390· Apache Druid — Kerberos authenticator (druid.auth.authenticator.kerberos) patched