Not rated
CVE-2020-1937 Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run…
Description
Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Kylin 3.0 | 3.0.0-alpha → 3.0.0 | No fix stated |
References
- [kylin-user] 20200223 [CVE-2020-1937] Apache Kylin SQL injection vulnerability lists.apache.org
- [kylin-commits] 20200713 svn commit: r1879845 - in /kylin/site: docs/security.html feed.xml lists.apache.org
- [kylin-commits] 20200715 svn commit: r1879879 - in /kylin/site: docs/security.html feed.xml lists.apache.org
Timeline
- Published
- Last modified