Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filtersApache Kylin Server-Side Request Forgery (SSRF) Vulnerability
Apache Kylin Files or Directories Accessible to External Parties
Apache Kylin Code Injection via JDBC Configuration Alteration
Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint
Apache Kylin Session Fixation vulnerability
Apache Kylin has Insufficiently Protected Credentials
Apache Kylin vulnerable to remote code execution
Apache Kylin vulnerable to Command injection by Diagnosis Controller
Apache Kylin vulnerable to Command injection by Useless configuration
Authentication bypass in Apache Kylin
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.
Use of Hard-coded Credentials in Apache Kylin
Server-Side Request Forgery in Apache Kylin
SQL Injection in Apache Kylin
Kylin can receive user input and load any class through Class.forName(...).
Command Injection in Apache Kylin
SQL Injection in Kylin
Command Injection in Kylin
SQL Injection in Kylin
Command Injection in Kylin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.