Lucene search
Veracode Vulnerability DatabaseVERACODE:37560HistoryOct 14, 2022 - 9:35 a.m.
Command Injection
2022-10-1409:35:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
kylin
command injection
system parameters
configuration overwrites
attacker
specially crafted request
operating system command
0.041 Low
EPSS
Percentile
92.2%
kylin is vulnerable to command injection. The vulnerability exists when overwriting system parameters in the configuration overwrites menu which allows an attacker to send a specially crafted request using the value parameter and inject any operating system command into the system.
Related
cve
cve
CVE-2022-24697
2022-10-13 13:15:09
CVE-2022-43396
2022-12-30 11:15:10
cvelist
cvelist
osv
osv
CVE-2022-24697
2022-10-13 13:15:09
Apache Kylin vulnerable to remote code execution
2023-07-06 19:24:01
CVE-2022-43396
2022-12-30 11:15:10
nvd
nvd
CVE-2022-24697
2022-10-13 13:15:09
CVE-2022-43396
2022-12-30 11:15:10
github
github
Apache Kylin vulnerable to remote code execution
2023-07-06 19:24:01
Apache Kylin vulnerable to Command injection by Useless configuration
2022-12-30 12:30:25
f5
f5
K13249530 : Apache Kylin vulnerability CVE-2022-24697
2022-10-24 00:00:00
prion
prion
Command injection
2022-10-13 13:15:00
Input validation
2022-12-30 11:15:00