CVE Intelligence

Maven Org.apache.kylin:kylin-core-common vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.apache.kylin:kylin-core-common: 1 record(s), with affected versions and fixes.

CVE-2020-1956 High · 8.8 KEV High · 66 Public exploit CWE-78 May 22, 2020
Apache Kylin OS Command Injection Vulnerability
Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.