org.apache.kylin:kylin-server-base
Apache Kylin - REST Server Base
Security Advisories for org.apache.kylin:kylin-server-base in maven
Likely fork
High
11 months ago
Apache Kylin Files or Directories Accessible to External Parties
maven
org.apache.kylin:kylin-server, org.apache.kylin:kylin-ops-server, org.apache.kylin:kylin-core-metadata, org.apache.kylin:kylin-core-common, org.apache.kylin:kylin-common-service, org.apache.kylin:kylin-common-server, org.apache.kylin:kylin
Likely fork
High
11 months ago
Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability
maven
org.apache.kylin:kylin-server, org.apache.kylin:kylin-ops-server, org.apache.kylin:kylin-core-metadata, org.apache.kylin:kylin-core-common, org.apache.kylin:kylin-common-service, org.apache.kylin:kylin-common-server, org.apache.kylin:kylin
Potential
High
11 months ago
Apache Kylin Authentication Bypass Vulnerability
maven
org.apache.kylin:kylin-core-common, org.apache.kylin:kylin
Potential
Low
over 1 year ago
Apache Kylin Code Injection via JDBC Configuration Alteration
maven
org.apache.kylin:kylin
Potential
Low
over 1 year ago
Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint
maven
org.apache.kylin:kylin-common-server
Potential
High
over 2 years ago
Apache Kylin has Insufficiently Protected Credentials
maven
org.apache.kylin:kylin-core-common
Critical
about 3 years ago
Apache Kylin vulnerable to remote code execution
maven
org.apache.kylin:kylin-server-base, org.apache.kylin:kylin-spark-project, org.apache.kylin:kylin-core-common
Critical
over 3 years ago
Apache Kylin vulnerable to Command injection by Diagnosis Controller
maven
org.apache.kylin:kylin-server-base
Potential
High
over 3 years ago
Apache Kylin vulnerable to Command injection by Useless configuration
maven
org.apache.kylin:kylin
Potential
High
over 4 years ago
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.
maven
org.apache.kylin:kylin
Potential
Potential
Potential
Potential
Moderate
over 4 years ago
Kylin can receive user input and load any class through Class.forName(...).
maven
org.apache.kylin:kylin
Potential
Potential