org.apache.kylin:kylin-common-server

1 result · Clear filters · Feed

• Medium 6.5
  CVE-2024-48944

  Apache Kylin: SSRF vulnerability in the diagnosis api

  Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke "/kylin/api/xxx/diag" api on another internal host and possibly get leaked information. There are two preconditions: 1) The att…

  Apache Software Foundation Apache Kylin org.apache.kylin:kylin-common-server Maven
  Mar 27, 2025