CVE-2024-45537

CVE-2024-45537 is a medium-severity vulnerability affecting Apache Druid, allowing authenticated users with specific permissions to bypass JDBC connection property restrictions. By crafting a malicious MySQL JDBC connection string, these users can introduce unauthorized properties, potentially leading to information disclosure (CVSS: 6.5, C:H). While the attack vector is network-based and low complexity, it requires prior authentication and specific user permissions. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.