Apache Kylin deserialization injection vulnerability

Versions 4 through 5.0.4 of Apache Kylin contain a deserialization injection vulnerability. This vulnerability arises because corrupted external cache services may lead to unsafe Java deserialization, resulting in the deserialization of untrusted data...