Vulnerabilities > Apache > Kylin > 1.5.3

DATE CVE VULNERABILITY TITLE RISK
2022-12-30 CVE-2022-43396 Unspecified vulnerability in Apache Kylin
In the fix for CVE-2022-24697, a blacklist is used to filter user input commands.
network
low complexity
apache
8.8
2022-12-30 CVE-2022-44621 Command Injection vulnerability in Apache Kylin
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.
network
low complexity
apache CWE-77
critical
9.8