Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.kylin/kylin@2.6.3
Typemaven
Namespaceorg.apache.kylin
Namekylin
Version2.6.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.1.1
Latest_non_vulnerable_version5.0.3
Affected_by_vulnerabilities
0
url VCID-3tdp-fpt7-mycx
vulnerability_id VCID-3tdp-fpt7-mycx
summary 
SQL Injection
Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1937
reference_id
reference_type
scores
0
value 0.06295
scoring_system epss
scoring_elements 0.91102
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1937
1
reference_url https://github.com/apache/kylin
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/kylin
2
reference_url https://github.com/apache/kylin/commit/e373c64c96a54a7abfe4bccb82e8feb60db04749
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/kylin/commit/e373c64c96a54a7abfe4bccb82e8feb60db04749
3
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
4
reference_url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/rc574fef23740522f62ab3bbda4f6171be98aa7a25f3f54be143a80a8%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc574fef23740522f62ab3bbda4f6171be98aa7a25f3f54be143a80a8%40%3Cuser.kylin.apache.org%3E
6
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-552148
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-552148
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1937
reference_id CVE-2020-1937
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1937
8
reference_url https://github.com/advisories/GHSA-7hmh-8gwv-mfvq
reference_id GHSA-7hmh-8gwv-mfvq
reference_type
scores
url https://github.com/advisories/GHSA-7hmh-8gwv-mfvq
fixed_packages
0
url pkg:maven/org.apache.kylin/kylin@2.6.5
purl pkg:maven/org.apache.kylin/kylin@2.6.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ssr-ftym-kubw
1
vulnerability VCID-8ye7-t531-b7hw
2
vulnerability VCID-jy58-3kzh-xfbz
3
vulnerability VCID-qvy9-qe44-kbf1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.5
1
url pkg:maven/org.apache.kylin/kylin@3.0.1
purl pkg:maven/org.apache.kylin/kylin@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ssr-ftym-kubw
1
vulnerability VCID-8ye7-t531-b7hw
2
vulnerability VCID-jy58-3kzh-xfbz
3
vulnerability VCID-qvy9-qe44-kbf1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.0.1
aliases CVE-2020-1937, GHSA-7hmh-8gwv-mfvq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3tdp-fpt7-mycx
1
url VCID-8ssr-ftym-kubw
vulnerability_id VCID-8ssr-ftym-kubw
summary 
OS Command Injection
Apache Kylin has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1956
reference_id
reference_type
scores
0
value 0.93724
scoring_system epss
scoring_elements 0.99859
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1956
1
reference_url https://community.sonarsource.com/t/apache-kylin-3-0-1-command-injection-vulnerability/25706
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://community.sonarsource.com/t/apache-kylin-3-0-1-command-injection-vulnerability/25706
2
reference_url https://github.com/apache/kylin
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/kylin
3
reference_url https://github.com/apache/kylin/commit/58fad56ac6aaa43c6bd8f962d7f2d84438664092
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/kylin/commit/58fad56ac6aaa43c6bd8f962d7f2d84438664092
4
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r1332ef34cf8e2c0589cf44ad269fb1fb4c06addec6297f0320f5111d%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1332ef34cf8e2c0589cf44ad269fb1fb4c06addec6297f0320f5111d%40%3Cuser.kylin.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cannounce.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cdev.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cdev.kylin.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cuser.kylin.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cannounce.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cdev.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cdev.kylin.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0%40%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0%40%3Ccommits.kylin.apache.org%3E
15
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-570207
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-570207
16
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1956
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1956
17
reference_url http://www.openwall.com/lists/oss-security/2020/07/14/1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/07/14/1
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1956
reference_id CVE-2020-1956
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1956
19
reference_url https://github.com/advisories/GHSA-gprm-xqrc-c2j3
reference_id GHSA-gprm-xqrc-c2j3
reference_type
scores
url https://github.com/advisories/GHSA-gprm-xqrc-c2j3
fixed_packages
0
url pkg:maven/org.apache.kylin/kylin@2.6.6
purl pkg:maven/org.apache.kylin/kylin@2.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8v1x-1x2n-vbhu
1
vulnerability VCID-8ye7-t531-b7hw
2
vulnerability VCID-jy58-3kzh-xfbz
3
vulnerability VCID-pjr6-y7uu-jqfd
4
vulnerability VCID-qvy9-qe44-kbf1
5
vulnerability VCID-sz6c-t8m7-z3dj
6
vulnerability VCID-x2j7-1kq5-e3ec
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.6
1
url pkg:maven/org.apache.kylin/kylin@3.0.2
purl pkg:maven/org.apache.kylin/kylin@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ye7-t531-b7hw
1
vulnerability VCID-jy58-3kzh-xfbz
2
vulnerability VCID-qvy9-qe44-kbf1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.0.2
aliases CVE-2020-1956, GHSA-gprm-xqrc-c2j3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8ssr-ftym-kubw
2
url VCID-8ye7-t531-b7hw
vulnerability_id VCID-8ye7-t531-b7hw
summary 
Insecure Storage of Sensitive Information
Apache Kylin has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-13937
reference_id
reference_type
scores
0
value 0.93332
scoring_system epss
scoring_elements 0.9982
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-13937
1
reference_url https://lists.apache.org/thread.html/rc592e0dcee5a2615f1d9522af30ef1822c1f863d5e05e7da9d1e57f4%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc592e0dcee5a2615f1d9522af30ef1822c1f863d5e05e7da9d1e57f4%40%3Cuser.kylin.apache.org%3E
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-13937
reference_id CVE-2020-13937
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-13937
fixed_packages
0
url pkg:maven/org.apache.kylin/kylin@3.0.0-alpha
purl pkg:maven/org.apache.kylin/kylin@3.0.0-alpha
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jy58-3kzh-xfbz
1
vulnerability VCID-qvy9-qe44-kbf1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.0.0-alpha
1
url pkg:maven/org.apache.kylin/kylin@3.1.1
purl pkg:maven/org.apache.kylin/kylin@3.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.1.1
2
url pkg:maven/org.apache.kylin/kylin@4.0.0-beta
purl pkg:maven/org.apache.kylin/kylin@4.0.0-beta
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@4.0.0-beta
3
url pkg:maven/org.apache.kylin/kylin@4.0.1
purl pkg:maven/org.apache.kylin/kylin@4.0.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@4.0.1
aliases CVE-2020-13937, GHSA-2hpg-vwqj-6h6w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8ye7-t531-b7hw
3
url VCID-jy58-3kzh-xfbz
vulnerability_id VCID-jy58-3kzh-xfbz
summary 
OS Command Injection
Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-13925
reference_id
reference_type
scores
0
value 0.84701
scoring_system epss
scoring_elements 0.99354
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-13925
1
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
2
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E
3
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-584373
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-584373
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-13925
reference_id CVE-2020-13925
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-13925
5
reference_url https://github.com/advisories/GHSA-qwfw-gxx2-mmv2
reference_id GHSA-qwfw-gxx2-mmv2
reference_type
scores
url https://github.com/advisories/GHSA-qwfw-gxx2-mmv2
fixed_packages
0
url pkg:maven/org.apache.kylin/kylin@3.1.0
purl pkg:maven/org.apache.kylin/kylin@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ye7-t531-b7hw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.1.0
aliases CVE-2020-13925, GHSA-qwfw-gxx2-mmv2
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jy58-3kzh-xfbz
4
url VCID-qvy9-qe44-kbf1
vulnerability_id VCID-qvy9-qe44-kbf1
summary 
SQL Injection
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-13926
reference_id
reference_type
scores
0
value 0.03106
scoring_system epss
scoring_elements 0.87059
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-13926
1
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
2
reference_url https://lists.apache.org/thread.html/r63d5663169e866d44ff9250796193337cff7d9cf61cc3839e86163fd%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r63d5663169e866d44ff9250796193337cff7d9cf61cc3839e86163fd%40%3Cuser.kylin.apache.org%3E
3
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-584374
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-584374
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-13926
reference_id CVE-2020-13926
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-13926
5
reference_url https://github.com/advisories/GHSA-hx5g-8hq2-8x4w
reference_id GHSA-hx5g-8hq2-8x4w
reference_type
scores
url https://github.com/advisories/GHSA-hx5g-8hq2-8x4w
fixed_packages
0
url pkg:maven/org.apache.kylin/kylin@3.1.0
purl pkg:maven/org.apache.kylin/kylin@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ye7-t531-b7hw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.1.0
aliases CVE-2020-13926, GHSA-hx5g-8hq2-8x4w
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qvy9-qe44-kbf1
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.3