Non notée
CVE-2020-1937 Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run…
Description
Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Kylin 3.0 | 3.0.0-alpha → 3.0.0 | Pas de correctif indiqué |
Références
- [kylin-user] 20200223 [CVE-2020-1937] Apache Kylin SQL injection vulnerability lists.apache.org
- [kylin-commits] 20200713 svn commit: r1879845 - in /kylin/site: docs/security.html feed.xml lists.apache.org
- [kylin-commits] 20200715 svn commit: r1879879 - in /kylin/site: docs/security.html feed.xml lists.apache.org
Chronologie
- Publiée
- Dernière modification