Skip to content
OpenAdvisories

Package · Maven

org.apache.kylin:kylin-server-base

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13925 Public exploit EPSS 20%

    Command Injection in Kylin

    Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to exe…

    org.apache.kylin:kylin-server-base Maven
  • Medium 6.5
    CVE-2020-1937 Public exploit

    SQL Injection in Kylin

    Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

    Apache Apache Kylin org.apache.kylin:kylin-server-base Maven