Design/Logic Flaw

2022-01-0613:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

47.7%

JSON

In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.

CPENameOperatorVersion
kylineq4.0.0 alpha
kylineq4.0.0 beta
kylineq4.0.0
kylinge3.0.0
kylinlt3.1.3
kylinge2.0.0
kylinle2.6.6

Name	Operator	Version
kylin	eq	4.0.0 alpha
kylin	eq	4.0.0 beta
kylin	eq	4.0.0
kylin	ge	3.0.0
kylin	lt	3.1.3
kylin	ge	2.0.0
kylin	le	2.6.6

References

www.openwall.com/lists/oss-security/2022/01/06/2

lists.apache.org/thread/rzv4mq58okwj1n88lry82ol2wwm57q1m

0.001 Low

EPSS

Percentile

47.7%

JSON

Related for PRION:CVE-2021-45457