SQL Injection in Kylin · CVE-2020-13926 · GitHub Advisory Database · GitHub

SQL Injection in Kylin

Critical severity GitHub Reviewed Published Jul 27, 2020 to the GitHub Advisory Database • Updated Jan 9, 2023

Package

org.apache.kylin:kylin-server-base (Maven)

Affected versions

< 3.1.0

Patched versions

3.1.0

Description

Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0 should upgrade to 3.1.0.

References

Reviewed Jul 27, 2020

Published to the GitHub Advisory Database Jul 27, 2020

Last updated Jan 9, 2023

Severity

Critical

9.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H