| CVE-2025-61733 |
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin
|
Non notée
|
2 oct. 2025 |
| CVE-2025-61734 |
Files or Directories Accessible to External Parties vulnerability in Apache Kylin
|
Non notée
|
2 oct. 2025 |
| CVE-2025-30067 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin
|
Non notée
|
27 mars 2025 |
| CVE-2024-48944 |
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin
|
Non notée
|
27 mars 2025 |
| CVE-2024-23590 |
Session Fixation vulnerability in Apache Kylin
|
Non notée
|
4 nov. 2024 |
| CVE-2023-29055 |
In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file…
|
Non notée
|
29 janv. 2024 |
| CVE-2022-44621 |
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request
|
Non notée
|
30 déc. 2022 |
| CVE-2022-43396 |
In the fix for CVE-2022-24697, a blacklist is used to filter user input commands
|
Non notée
|
30 déc. 2022 |
| CVE-2022-24697 |
Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the…
|
Non notée
|
13 oct. 2022 |
| CVE-2021-45458 |
Apache Kylin provides encryption classes PasswordPlaceholderConfigurer to help users encrypt their passwords
|
Non notée
|
6 janv. 2022 |
| CVE-2021-45457 |
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin
|
Non notée
|
6 janv. 2022 |
| CVE-2021-45456 |
Apache kylin checks the legitimacy of the project before executing some commands with the project name passed in by…
|
Non notée
|
6 janv. 2022 |
| CVE-2021-36774 |
Apache Kylin allows users to read data from other database systems using JDBC
|
Non notée
|
6 janv. 2022 |
| CVE-2021-31522 |
Kylin can receive user input and load any class through Class.forName(...)
|
Non notée
|
6 janv. 2022 |
| CVE-2021-27738 |
All request mappings in `StreamingCoordinatorController.java` handling `/kylin/api/streaming_coordinator/*` REST API…
|
Non notée
|
6 janv. 2022 |