Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8ssr-ftym-kubw
Summary
OS Command Injection
Apache Kylin has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.
Aliases
0
alias CVE-2020-1956
1
alias GHSA-gprm-xqrc-c2j3
Fixed_packages
0
url pkg:maven/org.apache.kylin/kylin@2.6.6
purl pkg:maven/org.apache.kylin/kylin@2.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-7sr2-htxm-v7dw
2
vulnerability VCID-8v1x-1x2n-vbhu
3
vulnerability VCID-8ye7-t531-b7hw
4
vulnerability VCID-jy58-3kzh-xfbz
5
vulnerability VCID-pjr6-y7uu-jqfd
6
vulnerability VCID-qvy9-qe44-kbf1
7
vulnerability VCID-sz6c-t8m7-z3dj
8
vulnerability VCID-ue1j-npxy-37cq
9
vulnerability VCID-x2j7-1kq5-e3ec
10
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.6
1
url pkg:maven/org.apache.kylin/kylin@3.0.2
purl pkg:maven/org.apache.kylin/kylin@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-7sr2-htxm-v7dw
3
vulnerability VCID-8v1x-1x2n-vbhu
4
vulnerability VCID-8ye7-t531-b7hw
5
vulnerability VCID-cret-1sa1-8kd6
6
vulnerability VCID-jy58-3kzh-xfbz
7
vulnerability VCID-pjr6-y7uu-jqfd
8
vulnerability VCID-qvy9-qe44-kbf1
9
vulnerability VCID-sz6c-t8m7-z3dj
10
vulnerability VCID-ue1j-npxy-37cq
11
vulnerability VCID-x2j7-1kq5-e3ec
12
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.0.2
2
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.6
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.6
3
url pkg:maven/org.apache.kylin/kylin-core-common@3.0.2
purl pkg:maven/org.apache.kylin/kylin-core-common@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@3.0.2
Affected_packages
0
url pkg:maven/org.apache.kylin/kylin@2.3.0
purl pkg:maven/org.apache.kylin/kylin@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.3.0
1
url pkg:maven/org.apache.kylin/kylin@2.3.1
purl pkg:maven/org.apache.kylin/kylin@2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.3.1
2
url pkg:maven/org.apache.kylin/kylin@2.3.2
purl pkg:maven/org.apache.kylin/kylin@2.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.3.2
3
url pkg:maven/org.apache.kylin/kylin@2.4.0
purl pkg:maven/org.apache.kylin/kylin@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.4.0
4
url pkg:maven/org.apache.kylin/kylin@2.4.1
purl pkg:maven/org.apache.kylin/kylin@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.4.1
5
url pkg:maven/org.apache.kylin/kylin@2.5.0
purl pkg:maven/org.apache.kylin/kylin@2.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.5.0
6
url pkg:maven/org.apache.kylin/kylin@2.5.1
purl pkg:maven/org.apache.kylin/kylin@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.5.1
7
url pkg:maven/org.apache.kylin/kylin@2.5.2
purl pkg:maven/org.apache.kylin/kylin@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.5.2
8
url pkg:maven/org.apache.kylin/kylin@2.6.0
purl pkg:maven/org.apache.kylin/kylin@2.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.0
9
url pkg:maven/org.apache.kylin/kylin@2.6.1
purl pkg:maven/org.apache.kylin/kylin@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.1
10
url pkg:maven/org.apache.kylin/kylin@2.6.2
purl pkg:maven/org.apache.kylin/kylin@2.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.2
11
url pkg:maven/org.apache.kylin/kylin@2.6.3
purl pkg:maven/org.apache.kylin/kylin@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.3
12
url pkg:maven/org.apache.kylin/kylin@2.6.4
purl pkg:maven/org.apache.kylin/kylin@2.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.4
13
url pkg:maven/org.apache.kylin/kylin@2.6.5
purl pkg:maven/org.apache.kylin/kylin@2.6.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-7sr2-htxm-v7dw
3
vulnerability VCID-8ssr-ftym-kubw
4
vulnerability VCID-8v1x-1x2n-vbhu
5
vulnerability VCID-8ye7-t531-b7hw
6
vulnerability VCID-jy58-3kzh-xfbz
7
vulnerability VCID-pjr6-y7uu-jqfd
8
vulnerability VCID-qvy9-qe44-kbf1
9
vulnerability VCID-sz6c-t8m7-z3dj
10
vulnerability VCID-ue1j-npxy-37cq
11
vulnerability VCID-x2j7-1kq5-e3ec
12
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@2.6.5
14
url pkg:maven/org.apache.kylin/kylin@3.0.0
purl pkg:maven/org.apache.kylin/kylin@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-3tdp-fpt7-mycx
2
vulnerability VCID-55ud-m45e-fqhk
3
vulnerability VCID-7sr2-htxm-v7dw
4
vulnerability VCID-8ssr-ftym-kubw
5
vulnerability VCID-8v1x-1x2n-vbhu
6
vulnerability VCID-8ye7-t531-b7hw
7
vulnerability VCID-cret-1sa1-8kd6
8
vulnerability VCID-jy58-3kzh-xfbz
9
vulnerability VCID-pjr6-y7uu-jqfd
10
vulnerability VCID-qvy9-qe44-kbf1
11
vulnerability VCID-sz6c-t8m7-z3dj
12
vulnerability VCID-ue1j-npxy-37cq
13
vulnerability VCID-x2j7-1kq5-e3ec
14
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.0.0
15
url pkg:maven/org.apache.kylin/kylin@3.0.1
purl pkg:maven/org.apache.kylin/kylin@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-7sr2-htxm-v7dw
3
vulnerability VCID-8ssr-ftym-kubw
4
vulnerability VCID-8v1x-1x2n-vbhu
5
vulnerability VCID-8ye7-t531-b7hw
6
vulnerability VCID-cret-1sa1-8kd6
7
vulnerability VCID-jy58-3kzh-xfbz
8
vulnerability VCID-pjr6-y7uu-jqfd
9
vulnerability VCID-qvy9-qe44-kbf1
10
vulnerability VCID-sz6c-t8m7-z3dj
11
vulnerability VCID-ue1j-npxy-37cq
12
vulnerability VCID-x2j7-1kq5-e3ec
13
vulnerability VCID-ygvg-2wzv-nubj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin@3.0.1
16
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.0
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.0
17
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.1
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.1
18
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.2
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.2
19
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.2.1
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.2.1
20
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.3
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.3
21
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.4
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.4
22
url pkg:maven/org.apache.kylin/kylin-core-common@1.5.4.1
purl pkg:maven/org.apache.kylin/kylin-core-common@1.5.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.5.4.1
23
url pkg:maven/org.apache.kylin/kylin-core-common@1.6.0
purl pkg:maven/org.apache.kylin/kylin-core-common@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55ud-m45e-fqhk
1
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@1.6.0
24
url pkg:maven/org.apache.kylin/kylin-core-common@2.0.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.0.0
25
url pkg:maven/org.apache.kylin/kylin-core-common@2.1.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.1.0
26
url pkg:maven/org.apache.kylin/kylin-core-common@2.2.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.2.0
27
url pkg:maven/org.apache.kylin/kylin-core-common@2.3.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.3.0
28
url pkg:maven/org.apache.kylin/kylin-core-common@2.3.1
purl pkg:maven/org.apache.kylin/kylin-core-common@2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.3.1
29
url pkg:maven/org.apache.kylin/kylin-core-common@2.3.2
purl pkg:maven/org.apache.kylin/kylin-core-common@2.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.3.2
30
url pkg:maven/org.apache.kylin/kylin-core-common@2.4.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.4.0
31
url pkg:maven/org.apache.kylin/kylin-core-common@2.4.1
purl pkg:maven/org.apache.kylin/kylin-core-common@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.4.1
32
url pkg:maven/org.apache.kylin/kylin-core-common@2.5.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.5.0
33
url pkg:maven/org.apache.kylin/kylin-core-common@2.5.1
purl pkg:maven/org.apache.kylin/kylin-core-common@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.5.1
34
url pkg:maven/org.apache.kylin/kylin-core-common@2.5.2
purl pkg:maven/org.apache.kylin/kylin-core-common@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.5.2
35
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.0
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.0
36
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.1
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.1
37
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.2
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.2
38
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.3
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.3
39
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.4
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.4
40
url pkg:maven/org.apache.kylin/kylin-core-common@2.6.5
purl pkg:maven/org.apache.kylin/kylin-core-common@2.6.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@2.6.5
41
url pkg:maven/org.apache.kylin/kylin-core-common@3.0.0
purl pkg:maven/org.apache.kylin/kylin-core-common@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@3.0.0
42
url pkg:maven/org.apache.kylin/kylin-core-common@3.0.1
purl pkg:maven/org.apache.kylin/kylin-core-common@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mp1-7zce-dkh8
1
vulnerability VCID-55ud-m45e-fqhk
2
vulnerability VCID-8ssr-ftym-kubw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.kylin/kylin-core-common@3.0.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1956
reference_id
reference_type
scores
0
value 0.93724
scoring_system epss
scoring_elements 0.9986
published_at 2026-06-08T12:55:00Z
1
value 0.93724
scoring_system epss
scoring_elements 0.99859
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1956
1
reference_url https://community.sonarsource.com/t/apache-kylin-3-0-1-command-injection-vulnerability/25706
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://community.sonarsource.com/t/apache-kylin-3-0-1-command-injection-vulnerability/25706
2
reference_url https://github.com/apache/kylin
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/kylin
3
reference_url https://github.com/apache/kylin/commit/58fad56ac6aaa43c6bd8f962d7f2d84438664092
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/kylin/commit/58fad56ac6aaa43c6bd8f962d7f2d84438664092
4
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r1332ef34cf8e2c0589cf44ad269fb1fb4c06addec6297f0320f5111d%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://lists.apache.org/thread.html/r1332ef34cf8e2c0589cf44ad269fb1fb4c06addec6297f0320f5111d%40%3Cuser.kylin.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cannounce.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cdev.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cdev.kylin.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb@%3Cuser.kylin.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cannounce.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cdev.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cdev.kylin.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0%40%3Ccommits.kylin.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0%40%3Ccommits.kylin.apache.org%3E
15
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-570207
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-570207
16
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1956
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1956
17
reference_url http://www.openwall.com/lists/oss-security/2020/07/14/1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T20:55:12Z/
url http://www.openwall.com/lists/oss-security/2020/07/14/1
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1956
reference_id CVE-2020-1956
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1956
19
reference_url https://github.com/advisories/GHSA-gprm-xqrc-c2j3
reference_id GHSA-gprm-xqrc-c2j3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gprm-xqrc-c2j3
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
0
date_added 2022-03-25
description Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution.
required_action Apply updates per vendor instructions.
due_date 2022-04-15
notes https://nvd.nist.gov/vuln/detail/CVE-2020-1956
known_ransomware_campaign_use false
source_date_published null
exploit_type null
platform null
source_date_updated null
data_source KEV
source_url null
Severity_range_score7.0 - 8.9
Exploitability2.0
Weighted_severity8.0
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8ssr-ftym-kubw