CVE-2022-24697

🗓️ 13 Oct 2022 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 92 Views

Kylin's cube designer function has a command injection vulnerability allowing RCE via system parameter overwriting

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2022-24697	13 Oct 202216:27	–	circl
CNNVD	Apache Kylin 操作系统命令注入漏洞	13 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-24697 Apache Kylin prior to 4.0.2 allows command injection when the configuration overwrites function overwrites system parameters	13 Oct 202200:00	–	cvelist
F5 Networks	K13249530: Apache Kylin vulnerability CVE-2022-24697	21 Feb 202318:53	–	f5
Github Security Blog	Apache Kylin vulnerable to remote code execution	6 Jul 202319:24	–	github
NVD	CVE-2022-24697	13 Oct 202213:15	–	nvd
OSV	GHSA-PPXX-M926-G569 Apache Kylin vulnerable to remote code execution	6 Jul 202319:24	–	osv
Prion	Command injection	13 Oct 202213:15	–	prion
Prion	Input validation	30 Dec 202211:15	–	prion
Positive Technologies	PT-2022-16810 · Kylin · Kylin	12 Oct 202200:00	–	ptsecurity

NVD

Vulners

Node

apache kylinRange2.0.0–2.6.6

apache kylinRange3.0.0–3.1.2

apache kylinRange4.0.0–4.0.1

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Kylin",
    "versions": [
      {
        "version": "Apache Kylin 2",
        "status": "affected",
        "lessThan": "2.6.6",
        "versionType": "custom"
      },
      {
        "version": "Apache Kylin 3",
        "status": "affected",
        "lessThanOrEqual": "3.1.2",
        "versionType": "custom"
      },
      {
        "version": "Apache Kylin 4",
        "status": "affected",
        "lessThanOrEqual": "4.0.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/07mnn9c7o314wrhrwjr10w9j5s82voj4
openwall	www.openwall.com/lists/oss-security/2022/12/30/1

16 May 2025 14:15Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.13594

SSVC

CWE-78