Search for packages
| purl | pkg:maven/org.apache.kylin/kylin-server-base@2.6.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-18qy-2g3u-y3c5
Aliases: CVE-2022-44621 GHSA-w9rv-xmf7-x3gh |
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request. |
Affected by 0 other vulnerabilities. |
|
VCID-2fey-zz91-w7db
Aliases: CVE-2020-13926 GHSA-hx5g-8hq2-8x4w |
SQL Injection in Kylin |
Affected by 2 other vulnerabilities. |
|
VCID-2qpe-nxm8-q7ht
Aliases: CVE-2020-1937 GHSA-7hmh-8gwv-mfvq |
SQL Injection in Kylin |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-bbtz-n7f8-3key
Aliases: CVE-2022-24697 GHSA-ppxx-m926-g569 |
Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier. |
Affected by 1 other vulnerability. |
|
VCID-dn31-nnyg-gfhu
Aliases: CVE-2020-13925 GHSA-qwfw-gxx2-mmv2 |
Command Injection in Kylin |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||