Sign in

Not rated

CVE-2022-44621 Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request

Description

Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.

Affected products and versions

Product	Affected versions	Fixed in
Apache Kylin 4.0	earliest → 4.0.2	No fix stated

The 40 CVEs of Apache Kylin →

CVE-2026-108837 Apache Kylin: Potential computed-column resource exhaustion Not rated CVE-2026-108833 Apache Kylin: default startup profile miss security settings Not rated CVE-2026-108823 Apache Kylin: Potential unauthenticated job metadata replacement Not rated CVE-2026-108780 Potential JDBC source configuration validation vulnerability in Apache Kylin Not rated

Do you use Apache Kylin?

Track this CVE Watch Apache Kylin Check my SBOMs

cveye.io/en/cve/CVE-2022-44621

Timeline

Published December 30, 2022
Last modified April 11, 2025

References

lists.apache.org lists.apache.org

Track this CVE