Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-44621

Apache Kylin: Command injection by Diagnosis Controller

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Kylin

Default version status: unaffected

  • Apache Kylin 4 to ≤ 4.0.2affected

References