Skip to content
OpenAdvisories

Package · Maven

org.apache.kylin:kylin-server-base

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13925 Public exploit EPSS 20%

    Command Injection in Kylin

    Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to exe…

    org.apache.kylin:kylin-server-base Maven