NetSight
IP …
high8.8

CVE-2020-1937

Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

Impact

Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

Affected products

VendorProductAffected versions
ApacheKylin
from 2.3.0 through 2.3.2
from 2.4.0 through 2.4.1
from 2.5.0 through 2.5.2
from 2.6.0 through 2.6.4
Version 3.0.0

Weakness classification

CWE-89

References