Advisoriesby Ibis
kylin security advisories
13 advisories · none critical or high in 12 months · latest Oct 2, 2025
13 advisories
Apache Kylin Server-Side Request Forgery (SSRF) VulnerabilityCVE-2025-61735fixed in 5.0.3Apache Kylin Authentication Bypass VulnerabilityCVE-2025-61733fixed in 5.0.3Apache Kylin Files or Directories Accessible to External PartiesCVE-2025-61734fixed in 5.0.3Apache Kylin Code Injection via JDBC Configuration AlterationCVE-2025-30067fixed in 5.0.2Apache Kylin Session Fixation vulnerabilityCVE-2024-23590fixed in 5.0.0Apache Kylin vulnerable to Command injection by Useless configurationCVE-2022-43396fixed in 4.0.3Authentication bypass in Apache KylinCVE-2020-13937fixed in 3.1.1 +1In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any originCVE-2021-45457fixed in 3.1.3 +1Use of Hard-coded Credentials in Apache KylinCVE-2021-45458fixed in 3.1.3 +1SQL Injection in Apache KylinCVE-2021-36774fixed in 3.1.3Server-Side Request Forgery in Apache KylinCVE-2021-27738fixed in 3.1.3Kylin can receive user input and load any class through Class.forName(...)CVE-2021-31522fixed in 3.1.3 +1Command Injection in Apache KylinCVE-2021-45456fixed in 4.0.1