CVE-2017-12630 — In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting spe — CVE Database · The Intelligence Room