Not rated
CVE-2021-45457 In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin
Description
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Kylin 4.0 | earliest → 4.0.0 | No fix stated |
| Apache Kylin 3.1 | earliest → 3.1.2 | No fix stated |
| Apache Kylin 2.6 | earliest → 2.6.6 | No fix stated |
References
- lists.apache.org lists.apache.org
- [oss-security] 20220106 CVE-2021-45457: Apache Kylin: Overly broad CORS configuration www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Apache Kylin
The 40 CVEs of Apache Kylin →
CVE-2026-108837
Apache Kylin: Potential computed-column resource exhaustion
Not rated
CVE-2026-108833
Apache Kylin: default startup profile miss security settings
Not rated
CVE-2026-108823
Apache Kylin: Potential unauthenticated job metadata replacement
Not rated
CVE-2026-108780
Potential JDBC source configuration validation vulnerability in Apache Kylin
Not rated