org.apache.kylin:kylin vulnerabilities (Maven)

13 vulnerabilities.

• org.apache.kylin:kylin Maven Apache Kylin: Server-Side Request Forgery CVE-2025-61735 Fix available 7.3 HighOctober 2, 2025
• org.apache.kylin:kylin Maven Apache Kylin: Authentication bypass CVE-2025-61733 Fix available 7.5 HighOctober 2, 2025
• org.apache.kylin:kylin Maven Apache Kylin: improper restriction of file read CVE-2025-61734 Fix available EPSS 28.0% 7.5 HighOctober 2, 2025
• org.apache.kylin:kylin Maven Apache Kylin: The remote code execution via jdbc url CVE-2025-30067 Fix available 7.2 HighMarch 27, 2025
• org.apache.kylin:kylin Maven Apache Kylin: Session fixation in web interface CVE-2024-23590 Fix available 9.1 CriticalNovember 4, 2024
• org.apache.kylin:kylin Maven Apache Kylin: Command injection by Useless configuration CVE-2022-43396 Fix available EPSS 55.3% 8.8 HighDecember 30, 2022
• org.apache.kylin:kylin Maven Hardcoded credentials CVE-2021-45458 Fix available 7.5 HighJanuary 6, 2022
• org.apache.kylin:kylin Maven Overly broad CORS configuration CVE-2021-45457 Fix available 7.5 HighJanuary 6, 2022
• org.apache.kylin:kylin Maven Command injection CVE-2021-45456 Fix available EPSS 88.9% 9.8 CriticalJanuary 6, 2022
• org.apache.kylin:kylin Maven Mysql JDBC Connector Deserialize RCE CVE-2021-36774 Fix available 6.5 MediumJanuary 6, 2022
• org.apache.kylin:kylin Maven Apache Kylin unsafe class loading CVE-2021-31522 Fix available 9.8 CriticalJanuary 6, 2022
• org.apache.kylin:kylin Maven Improper Access Control to Streaming Coordinator & SSRF CVE-2021-27738 Fix available 7.5 HighJanuary 6, 2022
• org.apache.kylin:kylin Maven Authentication bypass in Apache Kylin CVE-2020-13937 Public exploitFix available EPSS 78.3% 5.3 MediumOctober 19, 2020