org.apache.kylin:kylin-core-common vulnerabilities (Maven)

6 vulnerabilities.

• org.apache.kylin:kylin-core-common Maven Apache Kylin: Server-Side Request Forgery CVE-2025-61735 Fix available 7.3 HighOctober 2, 2025
• org.apache.kylin:kylin-core-common Maven Apache Kylin: Authentication bypass CVE-2025-61733 Fix available 7.5 HighOctober 2, 2025
• org.apache.kylin:kylin-core-common Maven Apache Kylin: improper restriction of file read CVE-2025-61734 Fix available EPSS 28.8% 7.5 HighOctober 2, 2025
• org.apache.kylin:kylin-core-common Maven Apache Kylin: Insufficiently protected credentials in config file CVE-2023-29055 Fix available 7.5 HighJanuary 29, 2024
• org.apache.kylin:kylin-core-common Maven Apache Kylin prior to 4.0.2 allows command injection when the configuration overwrites function overwrites system parameters CVE-2022-24697 Fix available EPSS 84.8% 9.8 CriticalOctober 13, 2022
• org.apache.kylin:kylin-core-common Maven Command Injection in Kylin CVE-2020-1956 In KEVPublic exploitFix available EPSS 98.0% 8.8 HighMay 22, 2020