Apache Software Foundation Kylin 3.0.0 Beta
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:kylin:3.0.0:beta:*:*:*:*:*:*
part: a version: 3.0.0 update: beta
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Kylin (c7126c68-0c13-5837-ae89-f066c2b60ff8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/kylin |
purl2cpe | 2026-06-01 10:14:30.210207 |
pkg:github/apache/kylin |
purl2cpe | 2026-06-01 10:14:30.210209 |
pkg:maven/org.apache.kylin/kylin |
purl2cpe | 2026-06-01 10:14:30.210210 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-1956 |
vulnerable | 2026-06-08 05:21:03.759815 |
Details available
Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.
Published: 2020-05-22T13:27:43.000Z
Updated: 2025-10-21T23:35:43.316Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1937 |
vulnerable | 2026-06-08 05:21:03.604433 |
Details available
Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.
Published: 2020-02-24T20:57:52.000Z
Updated: 2024-08-04T06:53:59.800Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13937 |
vulnerable | 2026-06-08 05:18:01.471165 |
Details available
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Published: 2020-10-19T20:33:18.000Z
Updated: 2024-08-04T12:32:14.371Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.