Non notée
CVE-2021-45456 Apache kylin checks the legitimacy of the project before executing some commands with the project name passed in by…
Description
Apache kylin checks the legitimacy of the project before executing some commands with the project name passed in by the user. There is a mismatch between what is being checked and what is being used as the shell command argument in DiagnosisService. This may cause an illegal project name to pass the check and perform the following steps, resulting in a command injection vulnerability. This issue affects Apache Kylin 4.0.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Kylin | Versions non publiées |
Références
- lists.apache.org lists.apache.org
- [oss-security] 20220106 CVE-2021-45456: Apache Kylin: Command injection www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Kylin
Les 40 CVE de Apache Kylin →
CVE-2026-108837
Apache Kylin: Potential computed-column resource exhaustion
Non notée
CVE-2026-108833
Apache Kylin: default startup profile miss security settings
Non notée
CVE-2026-108823
Apache Kylin: Potential unauthenticated job metadata replacement
Non notée
CVE-2026-108780
Potential JDBC source configuration validation vulnerability in Apache Kylin
Non notée