Apache Software Foundation Kylin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apache Software Foundation Kylin: 4 record(s), with affected versions and fixes.cpe:2.3:a:apache:kylin
CVE-2025-61735
High · 7.3
CWE-918 Oct 2, 2025
Apache Kylin: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
CVE-2025-61734
High · 7.5
CWE-552 Oct 2, 2025
Apache Kylin: improper restriction of file read
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
You are fine as long as the Kylin's system and project admin access is well protected.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
CVE-2025-61733
High · 7.5
CWE-288 Oct 2, 2025
Apache Kylin: Authentication bypass
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
CVE-2020-1956
High · 8.8
KEV High · 60 Public exploit CWE-78 May 22, 2020
Apache Kylin OS Command Injection Vulnerability
Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.