CVE-2020-13925

CVE-2020-13925 환경 구축 https://github.com/apache/kylin 를 참조하여 docker를 사용해 환경을 배포하고, 버전을 3.0.1취약한 버전로 수정합니다. -m 8G \는 메모리 할당 크기를 지정하는 것으로 제거해도 됩니다. 그런 다음 http://host:7070/kylin/login 에 접속합니다. 초기 사용자 이름과 비밀번호는 ADMIN/KYLIN입니다. docker pull apachekylin/apache-kylin-standalone:3.0.1 docker run -d \ -m 8G...

CVE-2020-13925

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:04+00:00| seen| Telegram/DGzHuk8RVb1b8Xt8Ti7JrWo03tk4z5tw950ouDC7Dv-DN4 2026-09-05 01:00:20+00:00| published-proof-of-concept| Telegram/DGzHuk8RVb1b8Xt8Ti7JrWo03tk4z5tw950ouDC7Dv-DN4...

CVE-2020-13925

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all...

Apache Kylin Command Injection (CVE-2020-13925)

A command injection vulnerability exists in Apache kylin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-13925

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all...

CVE-2020-13925

CVE-2020-13925 is a Kylin REST API command injection issue affecting 2.3.x through 3.1.0. The root cause is REST endpoints concatenating user input into OS commands, enabling remote command execution on vulnerable servers. The CVE is linked to CVE-2020-1956 disclosures describing similar REST‑bas...