Lucene search
Veracode Vulnerability DatabaseVERACODE:38805HistoryJan 09, 2023 - 11:40 a.m.
Command Injection
2023-01-0911:40:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
apache kylin
command injection
vulnerability
insecure blacklist
user input
arbitrary commands
system
EPSS
0.002
Percentile
52.6%
Apache Kylin is vulnerable to command injection. The vulnerability exists due to an insecure blacklist used to filter user input commands which allows an attacker to inject arbitrary commands into the system.
Related
cnvd
cnvd
Apache Kylin Command Injection Vulnerability
2023-01-04 00:00:00
cve
cve
CVE-2022-43396
2022-12-30 11:15:10
osv
osv
Apache Kylin vulnerable to Command injection by Useless configuration
2022-12-30 12:30:25
CVE-2022-43396
2022-12-30 11:15:10
github
github
Apache Kylin vulnerable to Command injection by Useless configuration
2022-12-30 12:30:25
prion
prion
Input validation
2022-12-30 11:15:00
cvelist
cvelist
CVE-2022-43396 Apache Kylin: Command injection by Useless configuration
2022-12-30 10:30:45
nvd
nvd
CVE-2022-43396
2022-12-30 11:15:10