Security
فارسی
All products

org.apache.kylin:kylin

Maven · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Kylin Authentication Bypass VulnerabilityCVE-2025-61733 · GHSA-MR9J-4J48-XCM2 org.apache.kylin:kylin-core-commonorg.apache.kylin:kylin Maven High Fix reported
Apache Kylin Server-Side Request Forgery (SSRF) VulnerabilityCVE-2025-61735 · GHSA-F6M8-QM7J-FH65 org.apache.kylin:kylin-common-serverorg.apache.kylin:kylin-common-service Maven High Fix reported
Apache Kylin Files or Directories Accessible to External PartiesCVE-2025-61734 · GHSA-P86W-W5RH-M3HX org.apache.kylin:kylin-common-serverorg.apache.kylin:kylin-common-service Maven High Fix reported
Apache Kylin Session Fixation vulnerabilityCVE-2024-23590 · GHSA-752Q-72QC-RC66 org.apache.kylin:kylin Maven High Fix reported
Apache Kylin vulnerable to Command injection by Useless configurationCVE-2022-43396 · GHSA-F5Q9-J9R2-34GQ org.apache.kylin:kylin Maven High Fix reported
Apache Kylin Code Injection via JDBC Configuration AlterationCVE-2025-30067 · GHSA-29M8-WH9P-5WC4 org.apache.kylin:kylin Maven Low Fix reported
Kylin can receive user input and load any class through Class.forName(...).CVE-2021-31522 · GHSA-Q656-G2X3-8CGH org.apache.kylin:kylin Maven Medium Fix reported
Command Injection in Apache KylinCVE-2021-45456 · GHSA-HW3M-8H25-8FRW org.apache.kylin:kylin Maven Medium Fix reported
Server-Side Request Forgery in Apache KylinCVE-2021-27738 · GHSA-WRX7-QGMJ-MF2Q org.apache.kylin:kylin Maven Medium Fix reported
SQL Injection in Apache KylinCVE-2021-36774 · GHSA-5429-PJWW-7675 org.apache.kylin:kylin Maven Medium Fix reported
Use of Hard-coded Credentials in Apache KylinCVE-2021-45458 · GHSA-9FJ5-JG6F-QG5R org.apache.kylin:kylin Maven High Fix reported
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.CVE-2021-45457 · GHSA-MGPF-HHGF-CXG4 org.apache.kylin:kylin Maven High Fix reported
Authentication bypass in Apache KylinCVE-2020-13937 · GHSA-2HPG-VWQJ-6H6W org.apache.kylin:kylin Maven Medium Fix reported