Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-23590 EUVD-2024-3205GHSA-752q-72qc-rc66

Apache Kylin: Session fixation in web interface

Published Nov 4, 2024 · Updated Nov 5, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Kylin Package: org.apache.kylin:kylin Ecosystem: Maven

Description

Session Fixation vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 2.0.0 through 4.x.

Users are recommended to upgrade to version 5.0.0 or above, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kylin 2.0.0 – < 5.0.0 5.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.kylin:kylin >= 2.0.0, < 5.0.0 5.0.0 GHSA-752q-72qc-rc66

References